CVE-2014-0574
Description
Double free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors.
Risk Information
Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
11.795
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Upgrade Adobe flash player 15.0.0.189 to latest version | Windows |
| Upgrade air 15.0.0.293 to latest version | Windows |
| Multiple vulnerabilities fixed in Chrome (x64) 39.0.2171.65 | Windows |
| Multiple vulnerabilities fixed in Chrome 39.0.2171.65 | Windows |
| Multiple vulnerabilities affected in Adobe Flash Player Plugin 15.0.0.189 | Windows |
| Multiple vulnerabilities affected in Adobe Flash Player PPAPI 15.0.0.189 | Windows |
| Multiple vulnerabilities are fixed in Google Chrome for Mac 39.0.2171.65 | Mac |
| Multiple Vulnerabilities are affected in Adobe AIR For Mac 15.0.0.356 | Mac |
| Multiple Vulnerabilities are affected in Adobe AIR For Mac 15.0.0.355 | Mac |
| Multiple vulnerabilities fixed in Chrome 39.0.2171.65 (For Debian) | Linux |
| Multiple vulnerabilities fixed in Chrome 39.0.2171.65 (For Centos) | Linux |
| Multiple vulnerabilities fixed in Chrome 39.0.2171.65 (For RedHat) | Linux |
| Multiple vulnerabilities fixed in Chrome 39.0.2171.65 (For Suse) | Linux |
| Multiple vulnerabilities fixed in Chrome 39.0.2171.65 (For Ubuntu) | Linux |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-313162 | Google Chrome (x64) (80.0.3987.132) |
| PATCH-313161 | Google Chrome (80.0.3987.132) |
| PATCH-611995 | Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133) |
| PATCH-601945 | Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only) |
| PATCH-601945 | Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234