CVE-2014-9163: Adobe Flash Player Stack-Based Buffer Overflow Vulnerability

First published: Wed Dec 10 2014(Updated: )

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.

Credit: psirt@adobe.com psirt@adobe.com

Affected Software	Affected Version	How to fix
Adobe Flash Player	>=13.0<13.0.0.259
Adobe Flash Player	>=14.0<=14.0.0.179
Adobe Flash Player	>=15.0<15.0.0.246
Apple Mac OS X
Microsoft Windows
Adobe Flash Player	>=11.0<11.2.202.425
Linux Linux kernel
Adobe Flash Player
All of
Any of
Adobe Flash Player	>=13.0<13.0.0.259
Adobe Flash Player	>=14.0<=14.0.0.179
Adobe Flash Player	>=15.0<15.0.0.246
Any of
Apple Mac OS X
Microsoft Windows
All of
Adobe Flash Player	>=11.0<11.2.202.425
Linux Linux kernel

Remedy

The impacted product is end-of-life and should be disconnected if still in use.

Never miss a vulnerability like this again

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.