NVD

Id
29432  
Name
CVE-2014-0540  
Description
Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-08-12  
Modified Date
2017-01-06  
Seq
2014-0540  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
156102 29432 CVE-2014-0540 http://helpx.adobe.com/security/products/flash-player/apsb14-18.html  View
156103 29432 CVE-2014-0540 60710  View
156104 29432 CVE-2014-0540 60732  View
156105 29432 CVE-2014-0540 GLSA-201408-05  View
156106 29432 CVE-2014-0540 1030712  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14891 JVNDB-2014-003766 Adobe Flash Player および Adobe AIR における ASLR 保護メカニズムを回避される脆弱性 Adobe Flash Player および Adobe AIR は、メモリアドレスの取得を適切に制限しないため、ASLR 保護メカニズムを回避される脆弱性が存在します。 CVE-2014-0540 67941 CVE-2014-0540 29432 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003766.html 2014-08-12 2014-08-14 View