CVE-2014-0556
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux,...
- Published
- Sep 10, 2014
- Updated
- Aug 6, 2024
- Assigning CNA
- adobe
- Evidence observed
- Apr 21, 2015
Primary CVSS
nvd · CVSS 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:CHigh · next 30 days
- Percentile
- 99.7%
- Model date
- Oct 13, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0559.
Sources
modules/exploits/windows/browser/adobe_flash_copy_pixels_to_byte_array.rb
Metasploit Framework modulesDeclared conditions
- platform: Windows($.exploit_windows/browser/adobe_flash_copy_pixels_to_byte_array.platform)
- verification: check_not_declared($.exploit_windows/browser/adobe_flash_copy_pixels_to_byte_array.check)
Metasploit · windows · Apr 21, 2015
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.