CVE-2014-0569 Integer overflow in n/a

Critical 9.3 Published 15 Oct 2014 Updated 6 Aug 2024

Attackers can execute arbitrary code via integer overflow in Adobe Flash Player, requiring user interaction to view malicious content.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2014-0569?

CVE-2014-0569 is a critical vulnerability in Adobe Air Desktop Runtime, published on 15 Oct 2014. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allows attackers to execute arbitrary code via unspecified vectors.

Weakness: CWE-190

Which versions are affected by CVE-2014-0569?

It affects 7 products.

Products include Adobe Air Desktop Runtime, Adobe Air Sdk, Adobe Flash Player, Adobe Flash Player Desktop Runtime, Opensuse Evergreen, Opensuse Opensuse and 1 more.

How do I fix CVE-2014-0569?

Upgrade to a fixed version.

Is CVE-2014-0569 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2014-0569 exists.

Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.

All Adobe Air Desktop Runtime vulnerabilities

Sources

Also known as GHSA-43mw-6w68-5pvw, UBUNTU-CVE-2014-0569.