ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-09.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://sebug.net/exploit/18967/

Resource:

x_refsource_MISC

Hyperlink: https://rhn.redhat.com/errata/RHSA-2010-0102.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://securitytracker.com/id?1023585

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16125

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://support.apple.com/kb/HT4188

Resource:

x_refsource_CONFIRM

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-06.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.exploit-db.com/exploits/11182

Resource:

exploit

x_refsource_EXPLOIT-DB

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/bid/38200

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8393

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=564287

Resource:

x_refsource_CONFIRM

Resource:

third-party-advisory

x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html	vendor-advisory x_refsource_APPLE x_transferred
http://www.vupen.com/english/advisories/2011/0192	vdb-entry x_refsource_VUPEN x_transferred
http://www.vupen.com/english/advisories/2010/1481	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/43026	third-party-advisory x_refsource_SECUNIA x_transferred
http://security.gentoo.org/glsa/glsa-201101-09.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://sebug.net/exploit/18967/	x_refsource_MISC x_transferred
https://rhn.redhat.com/errata/RHSA-2010-0102.html	vendor-advisory x_refsource_REDHAT x_transferred
http://securitytracker.com/id?1023585	vdb-entry x_refsource_SECTRACK x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16125	vdb-entry signature x_refsource_OVAL x_transferred
http://support.apple.com/kb/HT4188	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/40220	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.adobe.com/support/security/bulletins/apsb10-06.html	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.exploit-db.com/exploits/11182	exploit x_refsource_EXPLOIT-DB x_transferred
http://secunia.com/advisories/38547	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/bid/38200	vdb-entry x_refsource_BID x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8393	vdb-entry signature x_refsource_OVAL x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=564287	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/38915	third-party-advisory x_refsource_SECUNIA x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0192

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/1481

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-09.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://sebug.net/exploit/18967/

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://rhn.redhat.com/errata/RHSA-2010-0102.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://securitytracker.com/id?1023585

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16125

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://support.apple.com/kb/HT4188

Resource:

x_refsource_CONFIRM

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-06.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.exploit-db.com/exploits/11182

Resource:

exploit

x_refsource_EXPLOIT-DB

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securityfocus.com/bid/38200

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8393

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=564287

Resource:

x_refsource_CONFIRM

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@adobe.com

Published At:15 Feb, 2010 | 18:30

Updated At:11 Apr, 2025 | 00:51

Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) via a modified SWF file.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:N/A:P

CPE Matches

cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*

>>adobe_air>>Versions up to 1.5.3.9120(inclusive)

cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*

>>adobe_air>>1.0

cpe:2.3:a:adobe:adobe_air:1.1:*:*:*:*:*:*:*

>>adobe_air>>1.1

cpe:2.3:a:adobe:adobe_air:1.5.1:*:*:*:*:*:*:*

>>adobe_air>>1.5.1

cpe:2.3:a:adobe:adobe_air:1.5.2:*:*:*:*:*:*:*

>>adobe_air>>1.5.2

cpe:2.3:a:adobe:adobe_air:1.5.3:*:*:*:*:*:*:*

>>adobe_air>>1.5.3

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

>>flash_player>>Versions up to 10.0.42.34(inclusive)

cpe:2.3:a:adobe:flash_player:6.0.21.0:*:*:*:*:*:*:*

>>flash_player>>6.0.21.0

cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:*

>>flash_player>>6.0.79

cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*

>>flash_player>>7.0

cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*

>>flash_player>>7.0.1

cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*

>>flash_player>>7.0.25

cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*

>>flash_player>>7.0.63

cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*

>>flash_player>>7.0.69.0

cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*

>>flash_player>>7.0.70.0

cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*

>>flash_player>>7.1

cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*

>>flash_player>>7.1.1

cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*

>>flash_player>>7.2

cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*

>>flash_player>>8.0

cpe:2.3:a:adobe:flash_player:8.0.22.0:*:*:*:*:*:*:*

>>flash_player>>8.0.22.0

cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*

>>flash_player>>8.0.24.0

cpe:2.3:a:adobe:flash_player:8.0.33.0:*:*:*:*:*:*:*

>>flash_player>>8.0.33.0

cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*

>>flash_player>>8.0.34.0

cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*

>>flash_player>>8.0.35.0

cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*

>>flash_player>>8.0.39.0

cpe:2.3:a:adobe:flash_player:8.0.42.0:*:*:*:*:*:*:*

>>flash_player>>8.0.42.0

cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*

>>flash_player>>9.0

cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*

>>flash_player>>9.0.16

cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*

>>flash_player>>9.0.18d60

cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*

>>flash_player>>9.0.20

cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*

>>flash_player>>9.0.20.0

cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*

>>flash_player>>9.0.28.0

cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*

>>flash_player>>9.0.31

cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*

>>flash_player>>9.0.31.0

cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*

>>flash_player>>9.0.45.0

cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*

>>flash_player>>9.0.47.0

cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*

>>flash_player>>9.0.48.0

cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*

>>flash_player>>9.0.112.0

cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*

>>flash_player>>9.0.114.0

cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*

>>flash_player>>9.0.115.0

cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*

>>flash_player>>9.0.124.0

cpe:2.3:a:adobe:flash_player:9.0.125.0:*:*:*:*:*:*:*

>>flash_player>>9.0.125.0

cpe:2.3:a:adobe:flash_player:9.0.151.0:*:*:*:*:*:*:*

>>flash_player>>9.0.151.0

cpe:2.3:a:adobe:flash_player:9.0.152.0:*:*:*:*:*:*:*

>>flash_player>>9.0.152.0

cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*

>>flash_player>>9.0.159.0

cpe:2.3:a:adobe:flash_player:9.0.246.0:*:*:*:*:*:*:*

>>flash_player>>9.0.246.0

cpe:2.3:a:adobe:flash_player:9.0.260.0:*:*:*:*:*:*:*

>>flash_player>>9.0.260.0

cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*

>>flash_player>>9.125.0

cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*

>>flash_player>>10.0.12.10

cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*

>>flash_player>>10.0.12.36

Weaknesses

CWE ID	Type	Source
CWE-94	Primary	nvd@nist.gov

CWE ID: CWE-94

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html	psirt@adobe.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html	psirt@adobe.com	N/A
http://sebug.net/exploit/18967/	psirt@adobe.com	N/A
http://secunia.com/advisories/38547	psirt@adobe.com	N/A
http://secunia.com/advisories/38915	psirt@adobe.com	N/A
http://secunia.com/advisories/40220	psirt@adobe.com	N/A
http://secunia.com/advisories/43026	psirt@adobe.com	N/A
http://security.gentoo.org/glsa/glsa-201101-09.xml	psirt@adobe.com	N/A
http://securitytracker.com/id?1023585	psirt@adobe.com	N/A
http://support.apple.com/kb/HT4188	psirt@adobe.com	N/A
http://www.adobe.com/support/security/bulletins/apsb10-06.html	psirt@adobe.com	Vendor Advisory
http://www.exploit-db.com/exploits/11182	psirt@adobe.com	Exploit
http://www.securityfocus.com/bid/38200	psirt@adobe.com	N/A
http://www.vupen.com/english/advisories/2010/1481	psirt@adobe.com	N/A
http://www.vupen.com/english/advisories/2011/0192	psirt@adobe.com	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=564287	psirt@adobe.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16125	psirt@adobe.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8393	psirt@adobe.com	N/A
https://rhn.redhat.com/errata/RHSA-2010-0102.html	psirt@adobe.com	N/A
http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://sebug.net/exploit/18967/	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/38547	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/38915	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/40220	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43026	af854a3a-2127-422b-91ae-364da2661108	N/A
http://security.gentoo.org/glsa/glsa-201101-09.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://securitytracker.com/id?1023585	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT4188	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.adobe.com/support/security/bulletins/apsb10-06.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.exploit-db.com/exploits/11182	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://www.securityfocus.com/bid/38200	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/1481	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0192	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=564287	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16125	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8393	af854a3a-2127-422b-91ae-364da2661108	N/A
https://rhn.redhat.com/errata/RHSA-2010-0102.html	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://sebug.net/exploit/18967/

Source: psirt@adobe.com

Resource: N/A

Source: psirt@adobe.com

Resource: N/A

Source: psirt@adobe.com

Resource: N/A

Source: psirt@adobe.com

Resource: N/A

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-09.xml

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://securitytracker.com/id?1023585

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4188

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-06.html

Source: psirt@adobe.com

Resource:

Vendor Advisory

Hyperlink: http://www.exploit-db.com/exploits/11182

Source: psirt@adobe.com

Resource:

Exploit

Hyperlink: http://www.securityfocus.com/bid/38200

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/1481

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0192

Source: psirt@adobe.com

Resource: N/A

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=564287

Source: psirt@adobe.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16125

Source: psirt@adobe.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8393

Source: psirt@adobe.com

Resource: N/A

Hyperlink: https://rhn.redhat.com/errata/RHSA-2010-0102.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://sebug.net/exploit/18967/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-09.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://securitytracker.com/id?1023585

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4188

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-06.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.exploit-db.com/exploits/11182

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Hyperlink: http://www.securityfocus.com/bid/38200

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/1481

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0192

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=564287

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16125

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8393

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://rhn.redhat.com/errata/RHSA-2010-0102.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

125Records found

CVE-2014-0587

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-10.80% / 93.06%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-9164.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-windows flash_player mac_os_x linux_kernel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-0558

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-15.43% / 94.38%

7 Day CHG~0.00%

Published-15 Oct, 2014 | 10:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0564.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel adobe_air_sdk windows mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-5332

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-8.58% / 92.04%

7 Day CHG~0.00%

Published-11 Dec, 2013 | 15:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-0586

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-12.31% / 93.61%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, and CVE-2014-0590.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-0577

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-12.31% / 93.61%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, and CVE-2014-0590.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-0585

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-8.05% / 91.76%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-5325

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-0.83% / 73.63%

7 Day CHG~0.00%

Published-09 Oct, 2013 | 14:44

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 11.x before 11.0.05 on Windows allow remote attackers to execute arbitrary JavaScript code in a javascript: URL via a crafted PDF document.

Vendor-n/a Microsoft Corporation Adobe Inc.

Product-windows acrobat acrobat_reader n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-5331

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-87.69% / 99.43%

7 Day CHG~0.00%

Published-11 Dec, 2013 | 15:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified "type confusion," as exploited in the wild in December 2013.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-2549

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-5.44% / 89.79%

7 Day CHG~0.00%

Published-11 Mar, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Reader 11.0.02 allows remote attackers to execute arbitrary code via vectors related to a "break into the sandbox," as demonstrated by George Hotz during a Pwn2Own competition at CanSecWest 2013.

Vendor-n/a Adobe Inc.

Product-acrobat_reader n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-0607

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-7.64% / 91.50%

7 Day CHG~0.00%

Published-10 Jan, 2013 | 11:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error," a different vulnerability than CVE-2013-0608, CVE-2013-0611, CVE-2013-0614, and CVE-2013-0618.

Vendor-n/a Adobe Inc.

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-0614

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-7.64% / 91.50%

7 Day CHG~0.00%

Published-10 Jan, 2013 | 11:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error," a different vulnerability than CVE-2013-0607, CVE-2013-0608, CVE-2013-0611, and CVE-2013-0618.

Vendor-n/a Adobe Inc.

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-0618

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-8.48% / 91.99%

7 Day CHG~0.00%

Published-10 Jan, 2013 | 11:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error," a different vulnerability than CVE-2013-0607, CVE-2013-0608, CVE-2013-0611, and CVE-2013-0614.

Vendor-n/a Adobe Inc.

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-0608

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-8.48% / 91.99%

7 Day CHG~0.00%

Published-10 Jan, 2013 | 11:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error," a different vulnerability than CVE-2013-0607, CVE-2013-0611, CVE-2013-0614, and CVE-2013-0618.

Vendor-n/a Adobe Inc.

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-2101

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-16.27% / 94.57%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X do not properly restrict script, which allows attackers to execute arbitrary code via a crafted document, related to a "cross document script execution vulnerability."

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-0195

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-18.13% / 94.93%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-2217

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-5.97% / 90.31%

7 Day CHG~0.00%

Published-11 Aug, 2010 | 18:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arbitrary code via unspecified vectors, related to a "JS method vulnerability."

Vendor-n/a Adobe Inc.Microsoft Corporation Linux Kernel Organization, Inc

Product-linux_kernel flash_media_server flash_media_server_2 windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-2041

Matching Score-6

Matching Score-6

CVSS Score-4.3||MEDIUM

EPSS-0.67% / 70.35%

7 Day CHG~0.00%

Published-13 Jun, 2012 | 01:00

Updated-11 Apr, 2025 | 00:51

CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Vendor-n/a Adobe Inc.

Product-coldfusion n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1535

Matching Score-6

Assigner-MITRE Corporation

Vendor-n/a Adobe Inc.Microsoft Corporation SUSE Apple Inc.Red Hat, Inc.openSUSE Linux Kernel Organization, Inc

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-92.30% / 99.71%

7 Day CHG~0.00%

Published-15 Aug, 2012 | 10:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-03-24||The impacted product is end-of-life and should be disconnected if still in use.

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

Product-enterprise_linux_desktop flash_player windows enterprise_linux_workstation opensuse mac_os_x linux_enterprise_desktop linux_kernel enterprise_linux_server n/a Flash Player

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2008-5108

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-3.87% / 87.76%

7 Day CHG~0.00%

Published-17 Nov, 2008 | 22:00

Updated-07 Aug, 2024 | 10:40

Unspecified vulnerability in Adobe AIR 1.1 and earlier allows context-dependent attackers to execute untrusted JavaScript in an AIR application via unknown attack vectors.

Vendor-n/a Adobe Inc.

Product-adobe_air n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2007-5666

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.2||MEDIUM

EPSS-0.31% / 53.47%

7 Day CHG~0.00%

Published-12 Feb, 2008 | 18:00

Updated-07 Aug, 2024 | 15:39

Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local users to execute arbitrary code via a malicious Security Provider library in the reader's current working directory. NOTE: this issue might be subsumed by CVE-2008-0655.

Vendor-n/a Adobe Inc.

Product-acrobat_reader acrobat n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-0584

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-12.31% / 93.61%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2017-2968

Matching Score-6

Matching Score-6

CVSS Score-9.1||CRITICAL

EPSS-2.98% / 85.98%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 06:11

Updated-20 Apr, 2025 | 01:37

Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability.

Vendor-n/a Adobe Inc.

Product-campaign Adobe Campaign 16.4 Build 8724 and earlier.

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2008-1035

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-4.3||MEDIUM

EPSS-16.53% / 94.64%

7 Day CHG~0.00%

Published-03 Jun, 2008 | 20:00

Updated-07 Aug, 2024 | 08:08

Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger memory corruption or possibly execute arbitrary code via an "ATTACH;VALUE=URI:S=osumi" line in a .ics file, which triggers a "resource liberation" bug. NOTE: CVE-2008-2007 was originally used for this issue, but this is the appropriate identifier.

Vendor-n/a Apple Inc.

Product-ical n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2005-4209

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-4.3||MEDIUM

EPSS-0.54% / 66.70%

7 Day CHG~0.00%

Published-13 Dec, 2005 | 11:00

Updated-03 Apr, 2025 | 01:03

WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inboxes via script tags in the Subject header of an e-mail message, which prevents the user from being able to access the Inbox folder, possibly due to a cross-site scripting (XSS) vulnerability.

Vendor-alt-n n/a

Product-worldclient mdaemon n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2009-4636

Matching Score-4

Assigner-MITRE Corporation