CVE-2014-0515

EPSS 94.6%

Vexday Risk Score

60Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 94.6%KEV nãoPoC públicaNuclei —Metasploit simPatch referenciado

Lifecycle

28 Apr 2014Metasploit module available

29 Apr 2014Published on NVD

12 May 2014Public PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/33333unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://helpx.adobe.com/security/products/flash-player/apsb14-13.html http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00017.html http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00000.html http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00001.html http://rhn.redhat.com/errata/RHSA-2014-0447.html http://security.gentoo.org/glsa/glsa-201405-04.xml http://www.securityfocus.com/bid/67092 http://www.securitytracker.com/id/1030155