Vulnerabilities > CVE-2014-0536 - Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Adobe Flash Player
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Common Attack Pattern Enumeration and Classification (CAPEC)
- Buffer Overflow via Environment Variables This attack pattern involves causing a buffer overflow through manipulation of environment variables. Once the attacker finds that they can modify an environment variable, they may try to overflow associated buffers. This attack leverages implicit trust often placed in environment variables.
- Overflow Buffers Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an attacker. As a consequence, an attacker is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the attackers' choice.
- Client-side Injection-induced Buffer Overflow This type of attack exploits a buffer overflow vulnerability in targeted client software through injection of malicious content from a custom-built hostile service.
- Filter Failure through Buffer Overflow In this attack, the idea is to cause an active filter to fail by causing an oversized transaction. An attacker may try to feed overly long input strings to the program in an attempt to overwhelm the filter (by causing a buffer overflow) and hoping that the filter does not fail securely (i.e. the user input is let into the system unfiltered).
- MIME Conversion An attacker exploits a weakness in the MIME conversion routine to cause a buffer overflow and gain control over the mail server machine. The MIME system is designed to allow various different information formats to be interpreted and sent via e-mail. Attack points exist when data are converted to MIME compatible format and back.
Nessus
NASL family Gentoo Local Security Checks NASL id GENTOO_GLSA-201406-17.NASL description The remote host is affected by the vulnerability described in GLSA-201406-17 (Adobe Flash Player: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, conduct Cross-Site Scripting (XSS) attacks, or bypass security restrictions. Workaround : There is no known workaround at this time. last seen 2020-06-01 modified 2020-06-02 plugin id 82004 published 2015-03-24 reporter This script is Copyright (C) 2015 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/82004 title GLSA-201406-17 : Adobe Flash Player: Multiple vulnerabilities NASL family Windows NASL id FLASH_PLAYER_APSB14-16.NASL description According to its version, the instance of Flash Player installed on the remote Windows host is equal or prior to 13.0.0.214. It is, therefore, affected by the following vulnerabilities : - Multiple, unspecified errors exist that could allow cross-site scripting attacks. (CVE-2014-0531, CVE-2014-0532, CVE-2014-0533) - Multiple, unspecified errors exist that could allow unspecified security bypass attacks. (CVE-2014-0534, CVE-2014-0535) - An unspecified memory corruption issue exists that could allow arbitrary code execution. (CVE-2014-0536) last seen 2020-06-01 modified 2020-06-02 plugin id 74431 published 2014-06-11 reporter This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/74431 title Flash Player <= 13.0.0.214 Multiple Vulnerabilities (APSB14-16) NASL family MacOS X Local Security Checks NASL id MACOSX_FLASH_PLAYER_14_0_0_125.NASL description According to its version, the instance of Flash Player installed on the remote Mac OS X host is equal or prior to 13.0.0.214. It is, therefore, affected by the following vulnerabilities : - Multiple, unspecified errors exist that could allow cross-site scripting attacks. (CVE-2014-0531, CVE-2014-0532, CVE-2014-0533) - Multiple, unspecified errors exist that could allow unspecified security bypass attacks. (CVE-2014-0534, CVE-2014-0535) - An unspecified memory corruption issue exists that could allow arbitrary code execution. (CVE-2014-0536) last seen 2020-06-01 modified 2020-06-02 plugin id 74433 published 2014-06-11 reporter This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/74433 title Flash Player for Mac <= 13.0.0.214 Multiple Vulnerabilities (APSB14-16) NASL family SuSE Local Security Checks NASL id SUSE_11_FLASH-PLAYER-140616.NASL description flash-player was updated to version 11.2.202.378 to fix the following security issues : - Cross-site scripting vulnerabilities. (CVE-2014-0531 / CVE-2014-0532 / CVE-2014-0533) - Security bypass vulnerabilities. (CVE-2014-0534 / CVE-2014-0535) - Memory corruption vulnerability that could result in arbitrary code execution. (CVE-2014-0536) More information can be found at http://helpx.adobe.com/security/products/flash-player/ap sb14-16.html . last seen 2020-06-05 modified 2014-06-18 plugin id 76105 published 2014-06-18 reporter This script is Copyright (C) 2014-2020 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/76105 title SuSE 11.3 Security Update : flash-player (SAT Patch Number 9373) NASL family Windows NASL id SMB_KB2966072.NASL description The remote host is missing KB2966072. It is, therefore, potentially affected by multiple vulnerabilities : - Multiple, unspecified errors exist that could allow cross-site scripting attacks. (CVE-2014-0531, CVE-2014-0532, CVE-2014-0533) - Multiple, unspecified errors exist that could allow unspecified security bypass attacks. (CVE-2014-0534, CVE-2014-0535) - An unspecified memory corruption issue exists that could allow arbitrary code execution. (CVE-2014-0536) last seen 2020-06-01 modified 2020-06-02 plugin id 74429 published 2014-06-11 reporter This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/74429 title MS KB2966072: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer NASL family MacOS X Local Security Checks NASL id MACOSX_ADOBE_AIR_14_0_0_110.NASL description According to its version, the instance of Adobe AIR on the remote Mac OS X host is equal or prior to 13.0.0.111. It is, therefore, affected by the following vulnerabilities : - Multiple, unspecified errors exist that could allow cross-site scripting attacks. (CVE-2014-0531, CVE-2014-0532, CVE-2014-0533) - Multiple, unspecified errors exist that could allow unspecified security bypass attacks. (CVE-2014-0534, CVE-2014-0535) - An unspecified memory corruption issue exists that could allow arbitrary code execution. (CVE-2014-0536) last seen 2020-06-01 modified 2020-06-02 plugin id 74432 published 2014-06-11 reporter This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/74432 title Adobe AIR for Mac <= 13.0.0.111 Multiple Vulnerabilities (APSB14-16) NASL family SuSE Local Security Checks NASL id OPENSUSE-2014-423.NASL description flash-player was updated to version 11.2.202.378 to fix six security issues. These security issues were fixed : - Cross-site-scripting vulnerabilities (CVE-2014-0531, CVE-2014-0532, CVE-2014-0533). - Security bypass vulnerabilities (CVE-2014-0534, CVE-2014-0535). - A memory corruption vulnerability that could result in arbitrary code execution (CVE-2014-0536). last seen 2020-06-05 modified 2014-06-17 plugin id 76085 published 2014-06-17 reporter This script is Copyright (C) 2014-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/76085 title openSUSE Security Update : flash-player (openSUSE-SU-2014:0798-1) NASL family Windows NASL id ADOBE_AIR_APSB14-16.NASL description According to its version, the instance of Adobe AIR on the remote Windows host is equal or prior to 13.0.0.111. It is, therefore, affected by the following vulnerabilities : - Multiple, unspecified errors exist that could allow cross-site scripting attacks. (CVE-2014-0531, CVE-2014-0532, CVE-2014-0533) - Multiple, unspecified errors exist that could allow unspecified security bypass attacks. (CVE-2014-0534, CVE-2014-0535) - An unspecified memory corruption issue exists that could allow arbitrary code execution. (CVE-2014-0536) last seen 2020-06-01 modified 2020-06-02 plugin id 74430 published 2014-06-11 reporter This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/74430 title Adobe AIR <= AIR 13.0.0.111 Multiple Vulnerabilities (APSB14-16) NASL family Red Hat Local Security Checks NASL id REDHAT-RHSA-2014-0745.NASL description An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities are detailed in the Adobe Security Bulletin APSB14-16, listed in the References section. Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2014-0534, CVE-2014-0535, CVE-2014-0536) Multiple flaws in flash-plugin could allow an attacker to conduct cross-site scripting (XSS) attacks if a victim were tricked into visiting a specially crafted web page. (CVE-2014-0531, CVE-2014-0532, CVE-2014-0533) All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.378. last seen 2020-06-01 modified 2020-06-02 plugin id 74485 published 2014-06-12 reporter This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/74485 title RHEL 5 / 6 : flash-plugin (RHSA-2014:0745)
Redhat
| advisories |
| ||||
| rpms |
|
References
- http://helpx.adobe.com/security/products/flash-player/apsb14-16.html
- http://helpx.adobe.com/security/products/flash-player/apsb14-16.html
- http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00021.html
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00029.html
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00029.html
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00030.html
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00030.html
- http://rhn.redhat.com/errata/RHSA-2014-0745.html
- http://rhn.redhat.com/errata/RHSA-2014-0745.html
- http://secunia.com/advisories/58390
- http://secunia.com/advisories/58390
- http://secunia.com/advisories/58465
- http://secunia.com/advisories/58465
- http://secunia.com/advisories/58585
- http://secunia.com/advisories/58585
- http://secunia.com/advisories/59053
- http://secunia.com/advisories/59053
- http://secunia.com/advisories/59304
- http://secunia.com/advisories/59304
- http://security.gentoo.org/glsa/glsa-201406-17.xml
- http://security.gentoo.org/glsa/glsa-201406-17.xml
- http://www.securityfocus.com/bid/67961
- http://www.securityfocus.com/bid/67961
- http://www.securitytracker.com/id/1030368
- http://www.securitytracker.com/id/1030368