Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.

Versions of Adobe AIR earlier than 14.0.0.178 are unpatched for vulnerabilities related to the flash-plugin's processing of certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or potentially execute arbitrary code when the SWF content is loaded. (CVE-2014-0538, CVE-2014-0540, CVE-2014-0541, CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, CVE-2014-0545)

Additionally, insufficient input sanitation of data from the JSONP callback API could allow a context-dependent attacker to perform a cross-site request forgery (CSRF) attack, essentially forcing the victim to perform various actions supported by the affected website. (CVE-2014-5333, CVE-2015-3096)

Versions of Flash player earlier than 14.0.0.176 are unpatched for vulnerabilities related to the flash-plugin's processing of certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or potentially execute arbitrary code when the SWF content is loaded. (CVE-2014-0538, CVE-2014-0540, CVE-2014-0541, CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, CVE-2014-0545)

This flash-player update fixes the following security issues :

  - These updates resolve memory leakage vulnerabilities     that could have been used to bypass memory address     randomization. (CVE-2014-0540 / CVE-2014-0542 /     CVE-2014-0543 / CVE-2014-0544 / CVE-2014-0545)

  - These updates resolve a security bypass vulnerability.
    (CVE-2014-0541)

  - These updates resolve a use-after-free vulnerability     that could have lead to code execution (CVE-2014-0538).
    Find more details under     http://helpx.adobe.com/security/products/flash-player/ap     sb14-18.html

This critical flash-player update fixes the following CVEs :

  - Security update to 11.2.202.400 (bnc#891688) :

  - APSB14-18, CVE-2014-0538, CVE-2014-0540, CVE-2014-0541,     CVE-2014-0542, CVE-2014-0543, CVE-2014-0544,     CVE-2014-0545

The remote host is affected by the vulnerability described in GLSA-201408-05 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, cause a Denial of Service condition or bypass       security restrictions.
  Workaround :

    There is no known workaround at this time.

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.

Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

This update fixes multiple vulnerabilities in Adobe Flash Player.
These vulnerabilities are detailed in the Adobe Security Bulletin APSB14-18, listed in the References section.

Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2014-0538, CVE-2014-0540, CVE-2014-0541, CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, CVE-2014-0545)

All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.400.

According to its version, the instance of Flash Player installed on the remote Mac OS X host is equal or prior to 14.0.0.145. It is, therefore, affected by the following vulnerabilities :

  - A use-after-free error exists that allows code     execution. (CVE-2014-0538)

  - An unspecified security bypass error exists.
    (CVE-2014-0541)

  - Multiple errors exist related to memory leaks that can     be used to bypass memory address randomization.
    (CVE-2014-0540, CVE-2014-0542, CVE-2014-0543,     CVE-2014-0544, CVE-2014-0545)

According to its version, the instance of Adobe AIR on the remote Mac OS X host is equal or prior to 14.0.0.110. It is, therefore, affected by the following vulnerabilities :

  - A use-after-free error exits that allows code     execution. (CVE-2014-0538)

  - An unspecified security bypass error exists.
    (CVE-2014-0541)

  - Multiple errors exist related to memory leaks that can     be used to bypass memory address randomization.
    (CVE-2014-0540, CVE-2014-0542, CVE-2014-0543,     CVE-2014-0544, CVE-2014-0545)

According to its version, the instance of Flash Player installed on the remote Windows host is equal or prior to 14.0.0.145. It is, therefore, affected by the following vulnerabilities :

  - A use-after-free error exists that allows code     execution. (CVE-2014-0538)

  - An unspecified security bypass error exists.
    (CVE-2014-0541)

  - Multiple errors exist related to memory leaks that can     be used to bypass memory address randomization.
    (CVE-2014-0540, CVE-2014-0542, CVE-2014-0543,     CVE-2014-0544, CVE-2014-0545)

According to its version, the instance of Adobe AIR on the remote Windows host is equal or prior to 14.0.0.110. It is, therefore, affected by the following vulnerabilities :

  - A use-after-free error exits that allows code     execution. (CVE-2014-0538)

  - An unspecified security bypass error exists.
    (CVE-2014-0541)

  - Multiple errors exist related to memory leaks that can     be used to bypass memory address randomization.
    (CVE-2014-0540, CVE-2014-0542, CVE-2014-0543,     CVE-2014-0544, CVE-2014-0545)

The remote host is missing KB2982794. It is, therefore, affected by the following vulnerabilities :

  - A use-after-free error exits that allows code     execution. (CVE-2014-0538)

  - An unspecified security bypass error exists.
    (CVE-2014-0541)

  - Multiple errors exist related to memory leaks that can     be used to bypass memory address randomization.
    (CVE-2014-0540, CVE-2014-0542, CVE-2014-0543,     CVE-2014-0544, CVE-2014-0545)

ID	Name	Product	Family	Severity
8358	Adobe AIR < 14.0.0.178 Multiple Vulnerabilities (APSB14-18)	Nessus Network Monitor	Web Clients	critical
8357	Flash Player < 14.0.0.176 Multiple Vulnerabilities (APSB14-18)	Nessus Network Monitor	Web Clients	critical
77244	SuSE 11.3 Security Update : flash-player (SAT Patch Number 9612)	Nessus	SuSE Local Security Checks	critical
77214	openSUSE Security Update : flash-player (openSUSE-SU-2014:1020-1)	Nessus	SuSE Local Security Checks	critical
77212	GLSA-201408-05 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
77193	RHEL 5 / 6 : flash-plugin (RHSA-2014:1051)	Nessus	Red Hat Local Security Checks	critical
77174	Flash Player for Mac <= 14.0.0.145 Multiple Vulnerabilities (APSB14-18)	Nessus	MacOS X Local Security Checks	critical
77173	Adobe AIR for Mac <= 14.0.0.110 Multiple Vulnerabilities (APSB14-18)	Nessus	MacOS X Local Security Checks	critical
77172	Flash Player <= 14.0.0.145 Multiple Vulnerabilities (APSB14-18)	Nessus	Windows	critical
77171	Adobe AIR <= AIR 14.0.0.110 Multiple Vulnerabilities (APSB14-18)	Nessus	Windows	critical
77170	MS KB2982794: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer	Nessus	Windows	critical

Detections

Analytics

CVE-2014-0540

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical