Adobe Flash Player and AIR CVE-2014-0498 Remote Stack Overflow Vulnerability

Bugtraq ID:	65704
Class:	Unknown
CVE:	CVE-2014-0498
Remote:	Yes
Local:	No
Published:	Feb 20 2014 12:00AM
Updated:	Mar 19 2015 08:51AM
Credit:	Wen Guanxing of Venustech.
Vulnerable:	SuSE openSUSE 11.4 Red Hat Enterprise Linux Workstation Supplementary 6 Red Hat Enterprise Linux Supplementary 5 server Red Hat Enterprise Linux Server Supplementary 6 Red Hat Enterprise Linux Desktop Supplementary 6 Red Hat Enterprise Linux Desktop Supplementary 5 client Gentoo Linux Adobe Flash Player 11.2.202.235 Adobe Flash Player 11.2.202.233 Adobe Flash Player 11.2.202.229 Adobe Flash Player 11.2.202.228 Adobe Flash Player 11.2.202.223 Adobe Flash Player 11.1.115.8 Adobe Flash Player 11.1.115.7 Adobe Flash Player 11.1.115.6 Adobe Flash Player 11.1.112.61 Adobe Flash Player 11.1.111.9 Adobe Flash Player 11.1.111.8 Adobe Flash Player 11.1.111.7 Adobe Flash Player 11.1.111.6 Adobe Flash Player 11.1.111.5 Adobe Flash Player 11.1.102.63 Adobe Flash Player 11.1.102.62 Adobe Flash Player 11.1.102.55 Adobe Flash Player 11.1.102.228 Adobe Flash Player 11.0.1.152
Not Vulnerable:

Adobe Flash Player and AIR CVE-2014-0498 Remote Stack Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Adobe Flash Player and AIR CVE-2014-0498 Remote Stack Overflow Vulnerability

References:

• Microsoft Security Advisory: Update for vulnerabilities in Adobe Flash Player i (Microsoft)
  
• Adobe AIR homepage (Adobe)
  
• Adobe Flash Homepage (Adobe)
  
• Adobe Flash Player RegExp Stack Buffer Overflow Remote Code Execution Vulnerabil (Zero day initiative)
  
• Microsoft Security Advisory (2755801) Update for Vulnerabilities in Adobe Flash (Microsoft)
  
• openSUSE Security Update: flash-player: update to 11.2.202.341 security release (openSUSE)
  
• Security updates available for Adobe Flash Player (Adobe)