CVE-2014-0510

Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Zeguang Zhao and Liang Chen during a Pwn2Own competition at CanSecWest 2014.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
Affected Products (NVD)
VendorProductVersion
adobeflash_player
12.0.0.77
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
adobe-flashplugin
lucid
ignored
precise
not-affected
quantal
not-affected
saucy
not-affected
flashplugin-nonfree
lucid
ignored
precise
not-affected
quantal
not-affected
saucy
not-affected
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
flash-plugin
RHEL 6
0:11.2.202.359-1.el6
fixed
Common Weakness Enumeration
References
http://helpx.adobe.com/security/products/flash-player/apsb14-14.html
http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00008.html
http://rhn.redhat.com/errata/RHSA-2014-0496.html
http://security.gentoo.org/glsa/glsa-201406-08.xml
http://twitter.com/thezdi/statuses/444262022444621824
http://www.pwn2own.com/2014/03/pwn2own-results-thursday-day-two/
http://www.securityfocus.com/bid/66241
http://helpx.adobe.com/security/products/flash-player/apsb14-14.html
http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00008.html
http://rhn.redhat.com/errata/RHSA-2014-0496.html
http://security.gentoo.org/glsa/glsa-201406-08.xml
http://twitter.com/thezdi/statuses/444262022444621824
http://www.pwn2own.com/2014/03/pwn2own-results-thursday-day-two/
http://www.securityfocus.com/bid/66241