Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.

Adobe reports :

These updates address vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system.

The remote host is affected by the vulnerability described in GLSA-201409-05 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

Adobe Flash Player has been updated to 11.2.202.406 which fixes various security issues.

These updates :

  - resolve a memory leakage vulnerability that could have     been used to bypass memory address randomization.
    (CVE-2014-0557)

  - resolve a security bypass vulnerability. (CVE-2014-0554)

  - resolve a use-after-free vulnerability that could have     lead to code execution. (CVE-2014-0553)

  - resolve memory corruption vulnerabilities that could     have lead to code execution. (CVE-2014-0547 /     CVE-2014-0549 / CVE-2014-0550 / CVE-2014-0551 /     CVE-2014-0552 / CVE-2014-0555)

  - resolve a vulnerability that could have been used to     bypass the same origin policy. (CVE-2014-0548)

  - resolve a heap buffer overflow vulnerability that could     have lead to code execution (CVE-2014-0556 /     CVE-2014-0559). More information can be found on     http://helpx.adobe.com/security/products/flash-player/ap     sb14-21.html

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.

Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

This update fixes multiple vulnerabilities in Adobe Flash Player.
These vulnerabilities are detailed in the Adobe Security Bulletin APSB14-21, listed in the References section.

Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0553, CVE-2014-0554, CVE-2014-0555, CVE-2014-0556, CVE-2014-0557, CVE-2014-0559)

A flaw in flash-plugin could allow an attacker to bypass the same-origin policy. (CVE-2014-0548)

All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.406.

Adobe Flash Player was updated to 11.2.202.406 (bnc#895856) :

  - APSB14-21, CVE-2014-0547, CVE-2014-0548, CVE-2014-0549,     CVE-2014-0550, CVE-2014-0551, CVE-2014-0552,     CVE-2014-0553, CVE-2014-0554, CVE-2014-0555,     CVE-2014-0556, CVE-2014-0557, CVE-2014-0559

More information can be found on :

http://helpx.adobe.com/security/products/flash-player/apsb14-21.html

Versions of Adobe Flash Player prior or equal to 14.0.0.179 are outdated and thus unpatched for the following vulnerabilities :

  - Unspecified memory corruption issues exist that allow arbitrary code execution (CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0555).
  - An unspecified error exists that allows cross-origin policy violations (CVE-2014-0548).
  - A use-after-free error exists that allows arbitrary code execution (CVE-2014-0553).
  - An unspecified error exists that allows an unspecified security bypass (CVE-2014-0554).
  - Unspecified errors exist that allow memory leaks leading to easier defeat of memory address randomization (CVE-2014-0557).
  - Heap-based buffer overflow errors exist that allow arbitrary code execution (CVE-2014-0556, CVE-2014-0559).

Versions of Adobe AIR earlier than 15.0.0.249 are unpatched for the following vulnerabilities :

 - Unspecified memory corruption issues exist that allow arbitrary code execution. (CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0555)
 - An unspecified error exists that allows cross-origin policy violations. (CVE-2014-0548)
 - A use-after-free error exists that allows arbitrary code execution. (CVE-2014-0553)
 - An unspecified error exists that allows an unspecified security bypass. (CVE-2014-0554)
 - Unspecified errors exist that allow memory leaks leading to easier defeat of memory address randomization. (CVE-2014-0557)
 - Heap-based buffer overflow errors exist that allow arbitrary code execution. (CVE-2014-0556, CVE-2014-0559) 

Versions of Flash player earlier than 15.0.0.152 are unpatched for the following vulnerabilities:

  - Unspecified memory corruption issues exist that allow arbitrary code execution. (CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0555)

  - An unspecified error exists that allows cross-origin policy violations. (CVE-2014-0548)

  - A use-after-free error exists that allows arbitrary code execution. (CVE-2014-0553)

  - An unspecified error exists that allows an unspecified security bypass. (CVE-2014-0554)

  - Unspecified errors exist that allow memory leaks leading to easier defeat of memory address randomization. (CVE-2014-0557)

  - Heap-based buffer overflow errors exist that allow arbitrary code execution. (CVE-2014-0556, CVE-2014-0559)

The version of Google Chrome installed on the remote Mac OS X host is a version prior to 37.0.2062.120. It is, therefore, affected by the following vulnerabilities :

  - A use-after-free error exists related to rendering that     allows a remote attacker to execute arbitrary code.
    (CVE-2014-3178)

  - Unspecified errors exist having unspecified impact.
    (CVE-2014-3179)

Note that the following issues exist due to the version of Adobe Flash bundled with the application :

  - Unspecified memory corruption issues exist that allow     arbitrary code execution. (CVE-2014-0547, CVE-2014-0549,     CVE-2014-0550, CVE-2014-0551, CVE-2014-0552,     CVE-2014-0555)

  - An unspecified error exists that allows cross-origin     policy violations. (CVE-2014-0548)

  - A use-after-free error exists that allows arbitrary     code execution. (CVE-2014-0553)

  - An unspecified error exists that allows an unspecified     security bypass. (CVE-2014-0554)

  - Unspecified errors exist that allow memory leaks leading     to easier defeat of memory address randomization.
    (CVE-2014-0557)

  - Heap-based buffer overflow errors exist that allow     arbitrary code execution. (CVE-2014-0556, CVE-2014-0559)

The version of Google Chrome installed on the remote host is a version prior to 37.0.2062.120. It is, therefore, affected by the following vulnerabilities :

  - A use-after-free error exists related to rendering that     allows a remote attacker to execute arbitrary code.
    (CVE-2014-3178)

  - Unspecified errors exist having unspecified impact.
    (CVE-2014-3179)

Note that the following issues exist due to the version of Adobe Flash bundled with the application :

  - Unspecified memory corruption issues exist that allow     arbitrary code execution. (CVE-2014-0547, CVE-2014-0549,     CVE-2014-0550, CVE-2014-0551, CVE-2014-0552,     CVE-2014-0555)

  - An unspecified error exists that allows cross-origin     policy violations. (CVE-2014-0548)

  - A use-after-free error exists that allows arbitrary     code execution. (CVE-2014-0553)

  - An unspecified error exists that allows an unspecified     security bypass. (CVE-2014-0554)

  - Unspecified errors exist that allow memory leaks leading     to easier defeat of memory address randomization.
    (CVE-2014-0557)

  - Heap-based buffer overflow errors exist that allow     arbitrary code execution. (CVE-2014-0556, CVE-2014-0559)

The remote host is missing KB2987114. It is, therefore, affected by the following vulnerabilities :

  - Unspecified memory corruption issues exist that allow     arbitrary code execution. (CVE-2014-0547, CVE-2014-0549,     CVE-2014-0550, CVE-2014-0551, CVE-2014-0552,     CVE-2014-0555)

  - An unspecified error exists that allows cross-origin     policy violations. (CVE-2014-0548)

  - A use-after-free error exists that allows arbitrary     code execution. (CVE-2014-0553)

  - An unspecified error exists that allows an unspecified     security bypass. (CVE-2014-0554)

  - Unspecified errors exist that allow memory leaks leading     to easier defeat of memory address randomization.
    (CVE-2014-0557)

  - Heap-based buffer overflow errors exist that allow     arbitrary code execution. (CVE-2014-0556, CVE-2014-0559)

According to its version, the installation of Flash Player installed on the remote Mac OS X host is equal or prior to 14.0.0.179. It is, therefore, affected by the following vulnerabilities :

  - Unspecified memory corruption issues exist that allow     arbitrary code execution. (CVE-2014-0547, CVE-2014-0549,     CVE-2014-0550, CVE-2014-0551, CVE-2014-0552,     CVE-2014-0555)

  - An unspecified error exists that allows cross-origin     policy violations. (CVE-2014-0548)

  - A use-after-free error exists that allows arbitrary     code execution. (CVE-2014-0553)

  - An unspecified error exists that allows an unspecified     security bypass. (CVE-2014-0554)

  - Unspecified errors exist that allow memory leaks leading     to easier defeat of memory address randomization.
    (CVE-2014-0557)

  - Heap-based buffer overflow errors exist that allow     arbitrary code execution. (CVE-2014-0556, CVE-2014-0559)

According to its version, the installation of Adobe AIR on the remote Mac OS X host is equal or prior to 14.0.0.178. It is, therefore, affected by the following vulnerabilities :

  - Unspecified memory corruption issues exist that allow     arbitrary code execution. (CVE-2014-0547, CVE-2014-0549,     CVE-2014-0550, CVE-2014-0551, CVE-2014-0552,     CVE-2014-0555)

  - An unspecified error exists that allows cross-origin     policy violations. (CVE-2014-0548)

  - A use-after-free error exists that allows arbitrary     code execution. (CVE-2014-0553)

  - An unspecified error exists that allows an unspecified     security bypass. (CVE-2014-0554)

  - Unspecified errors exist that allow memory leaks leading     to easier defeat of memory address randomization.
    (CVE-2014-0557)

  - Heap-based buffer overflow errors exist that allow     arbitrary code execution. (CVE-2014-0556, CVE-2014-0559)

According to its version, the installation of Flash Player installed on the remote Windows host is equal or prior to 14.0.0.179. It is, therefore, affected by the following vulnerabilities :

  - Unspecified memory corruption issues exist that allow     arbitrary code execution. (CVE-2014-0547, CVE-2014-0549,     CVE-2014-0550, CVE-2014-0551, CVE-2014-0552,     CVE-2014-0555)

  - An unspecified error exists that allows cross-origin     policy violations. (CVE-2014-0548)

  - A use-after-free error exists that allows arbitrary     code execution. (CVE-2014-0553)

  - An unspecified error exists that allows an unspecified     security bypass. (CVE-2014-0554)

  - Unspecified errors exist that allow memory leaks leading     to easier defeat of memory address randomization.
    (CVE-2014-0557)

  - Heap-based buffer overflow errors exist that allow     arbitrary code execution. (CVE-2014-0556, CVE-2014-0559)

According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 14.0.0.178. It is, therefore, affected by the following vulnerabilities :

  - Unspecified memory corruption issues exist that allow     arbitrary code execution. (CVE-2014-0547, CVE-2014-0549,     CVE-2014-0550, CVE-2014-0551, CVE-2014-0552,     CVE-2014-0555)

  - An unspecified error exists that allows cross-origin     policy violations. (CVE-2014-0548)

  - A use-after-free error exists that allows arbitrary     code execution. (CVE-2014-0553)

  - An unspecified error exists that allows an unspecified     security bypass. (CVE-2014-0554)

  - Unspecified errors exist that allow memory leaks leading     to easier defeat of memory address randomization.
    (CVE-2014-0557)

  - Heap-based buffer overflow errors exist that allow     arbitrary code execution. (CVE-2014-0556, CVE-2014-0559)

ID	Name	Product	Family	Severity
77885	FreeBSD : Flash player -- Multiple security vulnerabilities in www/linux-*-flashplugin11 (ca44b64c-4453-11e4-9ea1-c485083ca99c)	Nessus	FreeBSD Local Security Checks	critical
77773	GLSA-201409-05 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
77672	SuSE 11.3 Security Update : flash-player (SAT Patch Number 9704)	Nessus	SuSE Local Security Checks	critical
77628	RHEL 5 / 6 : flash-plugin (RHSA-2014:1173)	Nessus	Red Hat Local Security Checks	critical
77621	openSUSE Security Update : flash-player (openSUSE-SU-2014:1110-1)	Nessus	SuSE Local Security Checks	critical
8382	Flash Player < 14.0.0.180 (inferred) Multiple Vulnerabilities (APSB14-21)	Nessus Network Monitor	Web Clients	high
8376	Adobe AIR < 15.0.0.249 Multiple Vulnerabilities (APSB14-21)	Nessus Network Monitor	Web Clients	high
8375	Flash Player < 15.0.0.152 Multiple Vulnerabilities (APSB14-21)	Nessus Network Monitor	Web Clients	high
77582	Google Chrome < 37.0.2062.120 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
77581	Google Chrome < 37.0.2062.120 Multiple Vulnerabilities	Nessus	Windows	critical
77580	MS KB2987114: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer	Nessus	Windows	critical
77579	Flash Player for Mac <= 14.0.0.179 Multiple Vulnerabilities (APSB14-21)	Nessus	MacOS X Local Security Checks	critical
77578	Adobe AIR for Mac <= 14.0.0.178 Multiple Vulnerabilities (APSB14-21)	Nessus	MacOS X Local Security Checks	critical
77577	Flash Player <= 14.0.0.179 Multiple Vulnerabilities (APSB14-21)	Nessus	Windows	critical
77576	Adobe AIR <= AIR 14.0.0.178 Multiple Vulnerabilities (APSB14-21)	Nessus	Windows	critical

Detections

Analytics

CVE-2014-0548

critical

Tenable Plugins

critical

critical

critical

critical

critical

high

high

high

critical

critical

critical

critical

critical

critical

critical