CVE-2014-8439: Adobe Flash Player Dereferenced Pointer Vulnerability
First published: Tue Nov 25 2014(Updated: )
Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.
Credit: psirt@adobe.com psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | ||
| All of | ||
| Adobe Acrobat Reader | <=11.2.202.418 | |
| Linux Kernel | ||
| Adobe AIR SDK | <=15.0.0.292 | |
| Adobe AIR | <=15.0.0.301 | |
| Adobe AIR SDK & Compiler | <15.0.0.302 | |
| All of | ||
| Adobe Acrobat Reader | <=15.0.0.223 | |
| Any of | ||
| Apple iOS and macOS | ||
| Microsoft Windows | ||
| All of | ||
| Adobe Acrobat Reader | <=13.0.0.252 | |
| Any of | ||
| Apple iOS and macOS | ||
| Microsoft Windows | ||
| All of | ||
| Adobe Acrobat Reader | <=11.2.202.418 | |
| Linux Kernel | ||
| Adobe PHP RIA SDK | <=15.0.0.301 | |
| All of | ||
| Adobe Acrobat Reader | <=15.0.0.223 | |
| Any of | ||
| Apple iOS and macOS | ||
| Microsoft Windows | ||
| All of | ||
| Adobe Acrobat Reader | <=13.0.0.252 | |
| Any of | ||
| Apple iOS and macOS | ||
| Microsoft Windows | ||
| Adobe Acrobat Reader | <=11.2.202.418 | |
| Linux Kernel | ||
| Adobe Acrobat Reader | <=15.0.0.223 | |
| Apple iOS and macOS | ||
| Microsoft Windows | ||
| Adobe Acrobat Reader | <=13.0.0.252 | |
| Apple iOS and macOS |
Remedy
The impacted product is end-of-life and should be disconnected if still in use.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://helpx.adobe.com/security/products/flash-player/apsb14-22.html
- http://helpx.adobe.com/security/products/flash-player/apsb14-26.html
- http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00004.html
- http://rhn.redhat.com/errata/RHSA-2014-1915.html
- http://secunia.com/advisories/60217
- http://www.securityfocus.com/bid/71289
- http://www.securitytracker.com/id/1031259
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98932
- https://www.f-secure.com/weblog/archives/00002768.html
- https://nvd.nist.gov/vuln/detail/CVE-2014-8439
Frequently Asked Questions
What is the severity of CVE-2014-8439?
CVE-2014-8439 has a high severity rating because it allows attackers to execute arbitrary code on affected systems.
How do I fix CVE-2014-8439?
To remediate CVE-2014-8439, update Adobe Flash Player to version 13.0.0.258 or greater for Windows and OS X, or version 11.2.202.424 or greater for Linux.
Which versions of Adobe Flash Player are affected by CVE-2014-8439?
CVE-2014-8439 affects Adobe Flash Player versions before 13.0.0.258 on Windows and OS X and versions before 11.2.202.424 on Linux.
Is Adobe AIR affected by CVE-2014-8439?
Yes, Adobe AIR versions prior to 15.0.0.293 are affected by CVE-2014-8439.
What platforms are impacted by CVE-2014-8439?
CVE-2014-8439 impacts Windows, macOS, and Linux platforms running vulnerable versions of Adobe Flash Player and Adobe AIR.
- agent/type
- agent/description
- agent/title
- agent/remedy
- agent/first-publish-date
- agent/references
- agent/author
- agent/trending
- agent/source
- collector/mitre-cve
- source/MITRE
- agent/event
- agent/weakness
- agent/severity
- agent/last-modified-date
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- collector/nvd-cve
- collector/nvd-index
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/11.2.202.418
- vendor/linux
- canonical/linux kernel
- canonical/adobe air sdk
- version/adobe air sdk/15.0.0.292
- canonical/adobe air
- version/adobe air/15.0.0.301
- canonical/adobe air sdk & compiler
- version/adobe acrobat reader/15.0.0.223
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows
- version/adobe acrobat reader/13.0.0.252
- canonical/adobe php ria sdk
- version/adobe php ria sdk/15.0.0.301