CVE-2014-0492 - CVE House
Back to Database
Status published Critical CVE-2014-0492

Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before...

Vulnerability Description

Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an "address leak."

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-0492

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

flash player, adobe air sdk, adobe air
Vulnerable Versions:
11.0, 11.8, 11.9, 0

Timeline

Official Publish: January 15th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.