CVE-2014-8439

Katalog CVE

CVSS 8.8 · High KEV · sudah dieksploitasi EPSS 20,4%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada adobe flash player, adobe air +2 lainnya. Skor CVSS 3.1 8.8 (High) menurut CISA ADP. Masuk katalog KEV CISA pada 25 Mei 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.

Rincian

Terbit di NVD

25 November 2014

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-416: Use After Free

EPSS (30 hari)

20,4% peluang dieksploitasi; lebih tinggi dari 97,4% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Adobe Flash Player Dereferenced Pointer Vulnerability

Masuk KEV

25 Mei 2022

Tenggat CISA

15 Juni 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

The impacted product is end-of-life and should be disconnected if still in use.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://helpx.adobe.com/security/products/flash-player/apsb14-22.html advisory vendor
• http://helpx.adobe.com/security/products/flash-player/apsb14-26.html advisory vendor
• http://rhn.redhat.com/errata/RHSA-2014-1915.html advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-8439 pemerintah AS
• http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00020.html advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00001.html advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00004.html advisory pihak ketiga
• http://www.securityfocus.com/bid/71289 advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1031259 advisory pihak ketiga · vdb entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98932 advisory pihak ketiga · vdb entry
• https://www.f-secure.com/weblog/archives/00002768.html advisory pihak ketiga
• http://secunia.com/advisories/60217 permissions required