Adobe Flash Player prior to 11.7.700.260 and 11.8.x and 11.9.x prior to 12.0.0.38 on Windows and Mac OS X and prior to 11.2.202.335 on Linux, Adobe AIR prior to 4.0.0.1390, Adobe AIR SDK prior to 4.0.0.1390, and Adobe AIR SDK & Compiler prior to 4.0.0.1390 allow malicious users to defeat the ASLR protection mechanism by leveraging an "address leak."
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
adobe flash_player |
||
adobe adobe air sdk |
||
adobe adobe air |
This month’s Adobe Patch Tuesday release sees fixes for Flash Player, Acrobat and Reader. All vulnerabilities get the highest priority rating. This means future exploits are likely. The Flash Player bulletin was only announced today. CVE-2014-0491 and CVE-2014-0492 both concern remote code execution vulnerabilities. CVE-2014-0493, CVE-2014-0495 and CVE-2014-0496 affect Acrobat and Reader. These CVEs also concern remote code execution vulnerabilities. All of this month’s vulnerabilities we...
Vulmon