CVE-2014-9163

HighKnown Exploited

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before…

adobe·NVD-CWE-Other·Published 2014-12-10

CVSS

7.8

EPSS

0.20

KEV

Yes

Exploits

cve.orgen

267 chars

Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.

NVDen

267 chars

NVDes

318 chars

Desbordamiento de buffer basado en pila en Adobe Flash Player anterior a 13.0.0.259 y 14.x y 15.x anterior a 15.0.0.246 en Windows y OS X y anteriores 11.2.202.425 en Linux permite a atacantes ejecutar código arbitrario a través de vectores no especificados, tal y como fue utilizado activamente en diciembre del 2014.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	10.0	10.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C
3.1	Primary	cve.org	7.8	—	—	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	7.8	—	—	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H