CVE-2014-0586: Code Injection

First published: Tue Nov 11 2014(Updated: )

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0590.

Credit: psirt@adobe.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/references
• agent/type
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/severity
• agent/remedy
• agent/weakness
• agent/author
• agent/description
• agent/event
• agent/first-publish-date
• agent/source
• agent/tags
• collector/nvd-index
• agent/software-canonical-lookup-request
• agent/softwarecombine
• vendor/adobe
• canonical/adobe flash player for internet explorer 11
• version/adobe flash player for internet explorer 11/13.0
• version/adobe flash player for internet explorer 11/14.0
• version/adobe flash player for internet explorer 11/14.0.0.179
• version/adobe flash player for internet explorer 11/15.0
• vendor/apple
• canonical/macos yosemite
• vendor/microsoft
• canonical/microsoft windows
• version/adobe flash player for internet explorer 11/11.0
• vendor/linux
• canonical/linux kernel
• canonical/adobe air sdk and compiler
• version/adobe air sdk and compiler/15.0.0.356
• canonical/adobe air
• version/adobe air/15.0.0.356
• canonical/adobe air sdk & compiler