CVE-2014-0502

Published: Feb 21, 2014Modified: Apr 21, 2026CISA KEV

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.

Affected (17)

Products: Adobe: Flash Player, Adobe Air Sdk, Adobe Air · Opensuse: Opensuse · Suse: Linux Enterprise Desktop · +1 more

Show all products

Adobe: Flash Player, Adobe Air Sdk, Adobe Air · Opensuse: Opensuse · Suse: Linux Enterprise Desktop · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Workstation

3 products

1 product

1 product

Linux Enterprise Desktop

Redhat

5 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Workstation

Configuration A

2 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Adobe Flash Player	Before 11.7.700.269
Adobe Flash Player	From 11.8.800.94 to 12.0.0.70

Running on/with	Platform Versions
Apple Mac Os X	All versions
Microsoft Windows	All versions

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Adobe Adobe Air Sdk	Before 4.0.0.1628

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Adobe Flash Player	Before 11.2.202.341

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Adobe Adobe Air	Before 4.0.0.1628

Running on/with	Platform Versions
Google Android	All versions

Configuration E

4 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.4
Opensuse Opensuse	Version 12.3
Opensuse Opensuse	Version 13.1
Suse Linux Enterprise Desktop	Version 11 sp3

Configuration F

8 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Eus	Version 6.5
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server Aus	Version 6.5
Redhat Enterprise Linux Workstation	Version 5.0
Redhat Enterprise Linux Workstation	Version 6.0