← Back

CVE-2014-9164

nvd nist
Published: Dec 10, 2014Modified: May 6, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0587.

Affected (4)

Products: Adobe: Flash Player
Adobe
1 product
Flash Player
Configuration A
3 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Adobe
Flash Player
From 13.0 to 13.0.0.259
Flash Player
From 14.0 to 14.0.0.179
Flash Player
From 16.0 to 16.0.0.235
Running on/withPlatform Versions
Apple
Mac Os X
All versions
Microsoft
Windows
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Flash Player
From 11.0 to 11.2.202.425
Running on/withPlatform Versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (2)

Source: psirt@adobe.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.