CVE-2014-0501: Buffer Overflow
Published Feb 12, 2014
·Updated
Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0500.
Affected Software
26 affected components
Adobe Shockwave Player<=12.0.7.148
Adobe Shockwave Player=11.0.0.456
Adobe Shockwave Player=11.0.3.471
Adobe Shockwave Player=11.5.0.595
Adobe Shockwave Player=11.5.0.596
Adobe Shockwave Player=11.5.1.601
Adobe Shockwave Player=11.5.2.602
Adobe Shockwave Player=11.5.6.606
Adobe Shockwave Player=11.5.7.609
Adobe Shockwave Player=11.5.8.612
Adobe Shockwave Player=11.5.9.615
Adobe Shockwave Player=11.5.9.620
Adobe Shockwave Player=11.5.10.620
Adobe Shockwave Player=11.6.0.626
Adobe Shockwave Player=11.6.1.629
Adobe Shockwave Player=11.6.3.633
Adobe Shockwave Player=11.6.4.634
Adobe Shockwave Player=11.6.5.635
Adobe Shockwave Player=11.6.6.636
Adobe Shockwave Player=11.6.7.637
Adobe Shockwave Player=11.6.8.638
Adobe Shockwave Player=12.0.0.112
Adobe Shockwave Player=12.0.2.122
Adobe Shockwave Player=12.0.3.133
Adobe Shockwave Player=12.0.4.144
Adobe Shockwave Player=12.0.6.147
Event History
Feb 12, 2014
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·04:50 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0501?
CVE-2014-0501 has a critical severity rating as it allows remote attackers to execute arbitrary code or cause a denial of service.
2
How do I fix CVE-2014-0501?
To fix CVE-2014-0501, update Adobe Shockwave Player to version 12.0.9.149 or later.
3
What versions of Adobe Shockwave Player are affected by CVE-2014-0501?
CVE-2014-0501 affects Adobe Shockwave Player versions prior to 12.0.9.149.
4
Can CVE-2014-0501 be exploited remotely?
Yes, CVE-2014-0501 can be exploited remotely by attackers to execute arbitrary code.
5
What types of systems are at risk from CVE-2014-0501?
Any system running an affected version of Adobe Shockwave Player is at risk from CVE-2014-0501.