{ "schema_version": "1.4.0", "id": "GHSA-w62w-9g5v-w3p4", "modified": "2025-02-10T21:31:14Z", "published": "2022-05-13T01:05:54Z", "aliases": [ "CVE-2014-8439" ], "details": "Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-8439" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98932" }, { "type": "WEB", "url": "https://www.f-secure.com/weblog/archives/00002768.html" }, { "type": "WEB", "url": "http://helpx.adobe.com/security/products/flash-player/apsb14-22.html" }, { "type": "WEB", "url": "http://helpx.adobe.com/security/products/flash-player/apsb14-26.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00020.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00001.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00004.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2014-1915.html" }, { "type": "WEB", "url": "http://secunia.com/advisories/60217" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/71289" }, { "type": "WEB", "url": "http://www.securitytracker.com/id/1031259" } ], "database_specific": { "cwe_ids": [ "CWE-119", "CWE-416" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2014-11-25T23:59:00Z" } }