CVE

Id
67915  
CVE No.
CVE-2014-0506  
Status
Candidate  
Description
Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to execute arbitrary code, and possibly bypass an Internet Explorer sandbox protection mechanism, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.  
Phase
Assigned (20131220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
656258 67915 CVE-2014-0506 MISC:http://twitter.com/thezdi/statuses/443886338077495296  View
656259 67915 CVE-2014-0506 MISC:http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/  View
656260 67915 CVE-2014-0506 CONFIRM:http://helpx.adobe.com/security/products/flash-player/apsb14-09.html  View
656261 67915 CVE-2014-0506 GENTOO:GLSA-201405-04  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13257 JVNDB-2014-002132 Android 用 Adobe Reader Mobile アプリケーションにおける任意のコードを実行される脆弱性 Android 用 Adobe Reader Mobile アプリケーションは、JavaScript の使用を適切に制限しないため、任意のコードを実行される脆弱性が存在します。 CVE-2014-0514 67915 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002132.html  View