CVE-2014-0506: Use After Free
Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to execute arbitrary code, and possibly bypass an Internet Explorer sandbox protection mechanism, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0506?
CVE-2014-0506 has been classified as a critical vulnerability that can lead to remote code execution.
How do I fix CVE-2014-0506?
To fix CVE-2014-0506, upgrade Adobe Flash Player to version 11.7.700.275 or later for Windows and OS X, or version 11.2.202.350 or later for Linux.
What systems are affected by CVE-2014-0506?
CVE-2014-0506 affects Adobe Flash Player versions prior to 11.7.700.275 and 11.2.202.350 on Linux, as well as several versions of Adobe AIR on various platforms.
What are the potential impacts of CVE-2014-0506?
Exploiting CVE-2014-0506 could allow attackers to execute arbitrary code, compromising the affected system's security and potentially leading to data theft.
Is CVE-2014-0506 still a concern today?
While CVE-2014-0506 was a significant issue at the time of discovery, it remains a concern mainly for systems that have not been updated to newer, secure versions of Adobe Flash Player.