CVE-2014-9163highunder attackCWE-121

CVE-2014-9163

Published · Updated

Follow this CVE+ Monitor Flash Player

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 7.8epss 45%
from disclosure to weapon
Published on NVDDec 10
CISA KEV+2681d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
5 products
Red Hat Enterprise Linux Desktop Supplementary (v. 5) · Red Hat Enterprise Linux Desktop Supplementary (v. 6) · Red Hat Enterprise Linux Server Supplementary (v. 5) · Red Hat Enterprise Linux Server Supplementary (v. 6) · Red Hat Enterprise Linux Workstation Supplementary (v. 6)
fix ↗
Action required by CISAfederal deadline: 2022-05-04

The impacted product is end-of-life and should be disconnected if still in use.

In short

Adobe Flash Player had a vulnerability where attackers could overflow a memory buffer on the stack to run malicious code on your computer. This was actively being exploited in the wild in December 2014.

Technical detail

A stack-based buffer overflow in Adobe Flash Player (versions before 13.0.0.259, 15.0.0.246, and 11.2.202.425 across Windows, OS X, and Linux) allowed arbitrary code execution through unspecified attack vectors. The vulnerability was actively exploited in the wild, requiring only Flash Player to be installed and processing untrusted content.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a