NVD

Id
29449  
Name
CVE-2014-0557  
Description
Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-09-09  
Modified Date
2017-01-06  
Seq
2014-0557  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
156230 29449 CVE-2014-0557 http://helpx.adobe.com/security/products/flash-player/apsb14-21.html  View
156231 29449 CVE-2014-0557 openSUSE-SU-2014:1110  View
156232 29449 CVE-2014-0557 SUSE-SU-2014:1124  View
156233 29449 CVE-2014-0557 openSUSE-SU-2014:1130  View
156234 29449 CVE-2014-0557 61089  View
156235 29449 CVE-2014-0557 GLSA-201409-05  View
156236 29449 CVE-2014-0557 69701  View
156237 29449 CVE-2014-0557 1030822  View
156238 29449 CVE-2014-0557 adobe-flash-cve20140557-sec-bypass(95827)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15253 JVNDB-2014-004128 Adobe Flash Player および Adobe AIR における ASLR 保護メカニズムを回避される脆弱性 Adobe Flash Player および Adobe AIR は、メモリアドレスの取得を適切に制限しないため、ASLR 保護メカニズムを回避される脆弱性が存在します。 CVE-2014-0557 67958 CVE-2014-0557 29449 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004128.html 2014-09-09 2014-09-17 View