CISA hat am 17.09.2024 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 08.10.2024.
Erforderliche Maßnahme: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product. https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2014-0502
Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| adobe | adobe air | < 4.0.0.1628 | |
| adobe | adobe air sdk | < 4.0.0.1628 | |
| adobe | air | < 4.0.0.1628 | |
| adobe | air_sdk | < 4.0.0.1628 | |
| adobe | flash_player | < 11.7.700.269, 11.8.0 – < 12.0.0.70 | |
| opensuse | opensuse | 11.4 | |
| redhat | enterprise linux desktop | 5.0 | |
| redhat | enterprise linux eus | 6.5 | |
| redhat | enterprise linux server | 5.0 | |
| redhat | enterprise linux server aus | 6.5 | |
| redhat | enterprise linux workstation | 5.0 | |
| suse | linux enterprise desktop | 11 |
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* < 11.7.700.269cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* ≥ 11.8.800.94 < 12.0.0.70cpe:2.3:a:adobe:adobe_air_sdk:*:*:*:*:*:*:*:* < 4.0.0.1628cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* < 11.2.202.341cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:* < 4.0.0.1628cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:6.5:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*Unser kostenloser Open-Source-Honeypot wartet auf Ports, die Ihr Server nicht nutzt, und meldet verbindende Scanner und Angreifer an eine gemeinsame Blockliste.