CVE-2014-0499

Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:N/A:N
adobeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
VendorProductVersion
adobeflash_player
11.0 ≤
𝑥
< 11.7.700.269
adobeflash_player
11.8 ≤
𝑥
< 11.8.800.175
adobeflash_player
11.9 ≤
𝑥
< 12.0.0.70
adobeadobe_air_sdk
𝑥
< 4.0.0.1628
adobeflash_player
11.0 ≤
𝑥
< 11.2.202.341
adobeadobe_air
𝑥
< 4.0.0.1628
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
adobe-flashplugin
saucy
Fixed 11.2.202.341-0saucy1
released
quantal
Fixed 11.2.202.341-0quantal1
released
precise
Fixed 11.2.202.341-0precise1
released
lucid
ignored
flashplugin-nonfree
saucy
Fixed 11.2.202.341ubuntu0.13.10.1
released
quantal
Fixed 11.2.202.341ubuntu0.12.10.1
released
precise
Fixed 11.2.202.341ubuntu0.12.04.1
released
lucid
ignored
Common Weakness Enumeration