CVE-2014-0499: High severity Adobe Flash Player vulnerability
Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0499?
CVE-2014-0499 is classified as a critical vulnerability due to its potential for exploitation.
How do I fix CVE-2014-0499?
To fix CVE-2014-0499, update Adobe Flash Player to version 11.7.700.269 or later for affected systems.
Which platforms are affected by CVE-2014-0499?
CVE-2014-0499 affects various versions of Adobe Flash Player on Windows, Mac OS X, and Linux, as well as Adobe AIR on Android.
Are there any workarounds for CVE-2014-0499?
Disabling or uninstalling Adobe Flash Player can serve as a temporary workaround for CVE-2014-0499 until a patch is applied.
Is Adobe AIR affected by CVE-2014-0499?
Yes, Adobe AIR versions prior to 4.0.0.1628 are affected by CVE-2014-0499 and should be updated.