CVE-2016-3955 | ByteOS Network

Vulnerability Details :

CVE-2016-3955

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-03 Jul, 2016 | 21:00

Updated At-06 Aug, 2024 | 00:10

The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:03 Jul, 2016 | 21:00

Updated At:06 Aug, 2024 | 00:10

▼CVE Numbering Authority (CNA)

The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.

Affected Products

Vendor

Product

Versions

Affected

n/a

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.ubuntu.com/usn/USN-3004-1	vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-3001-1	vendor-advisory x_refsource_UBUNTU
https://github.com/torvalds/linux/commit/b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html	vendor-advisory x_refsource_SUSE
http://www.ubuntu.com/usn/USN-2997-1	vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-3000-1	vendor-advisory x_refsource_UBUNTU
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3	x_refsource_CONFIRM
http://www.debian.org/security/2016/dsa-3607	vendor-advisory x_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-3002-1	vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-2996-1	vendor-advisory x_refsource_UBUNTU
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1328478	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2989-1	vendor-advisory x_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-3003-1	vendor-advisory x_refsource_UBUNTU
http://www.securityfocus.com/bid/86534	vdb-entry x_refsource_BID
http://www.ubuntu.com/usn/USN-2998-1	vendor-advisory x_refsource_UBUNTU
http://www.openwall.com/lists/oss-security/2016/04/19/1	mailing-list x_refsource_MLIST

Hyperlink: http://www.ubuntu.com/usn/USN-3004-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.ubuntu.com/usn/USN-3001-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://github.com/torvalds/linux/commit/b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.ubuntu.com/usn/USN-2997-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.ubuntu.com/usn/USN-3000-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.debian.org/security/2016/dsa-3607

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://www.ubuntu.com/usn/USN-3002-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.ubuntu.com/usn/USN-2996-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb

Resource:

x_refsource_CONFIRM

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1328478

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ubuntu.com/usn/USN-2989-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.ubuntu.com/usn/USN-3003-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.securityfocus.com/bid/86534

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.ubuntu.com/usn/USN-2998-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.openwall.com/lists/oss-security/2016/04/19/1

Resource:

mailing-list

x_refsource_MLIST

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.ubuntu.com/usn/USN-3004-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.ubuntu.com/usn/USN-3001-1	vendor-advisory x_refsource_UBUNTU x_transferred
https://github.com/torvalds/linux/commit/b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.ubuntu.com/usn/USN-2997-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.ubuntu.com/usn/USN-3000-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3	x_refsource_CONFIRM x_transferred
http://www.debian.org/security/2016/dsa-3607	vendor-advisory x_refsource_DEBIAN x_transferred
http://www.ubuntu.com/usn/USN-3002-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.ubuntu.com/usn/USN-2996-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb	x_refsource_CONFIRM x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1328478	x_refsource_CONFIRM x_transferred
http://www.ubuntu.com/usn/USN-2989-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.ubuntu.com/usn/USN-3003-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.securityfocus.com/bid/86534	vdb-entry x_refsource_BID x_transferred
http://www.ubuntu.com/usn/USN-2998-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.openwall.com/lists/oss-security/2016/04/19/1	mailing-list x_refsource_MLIST x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-3004-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-3001-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: https://github.com/torvalds/linux/commit/b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-2997-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-3000-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.debian.org/security/2016/dsa-3607

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-3002-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-2996-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1328478

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-2989-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-3003-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.securityfocus.com/bid/86534

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-2998-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2016/04/19/1

Resource:

mailing-list

x_refsource_MLIST

x_transferred

▼National Vulnerability Database (NVD)

Source:cve@mitre.org

Published At:03 Jul, 2016 | 21:59

Updated At:12 Apr, 2025 | 10:46

The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted length value in a USB/IP packet.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

>>ubuntu_linux>>12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*

>>ubuntu_linux>>12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

>>ubuntu_linux>>14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

>>ubuntu_linux>>14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

>>ubuntu_linux>>15.10

cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions before 3.2.80(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 3.3(inclusive) to 3.10.102(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 3.11(inclusive) to 3.12.59(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 3.13(inclusive) to 3.14.68(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 3.17(inclusive) to 3.18.37(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 3.19(inclusive) to 4.1.28(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.2(inclusive) to 4.4.9(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.5(inclusive) to 4.5.3(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>8.0

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb	cve@mitre.org	Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html	cve@mitre.org	Mailing List Third Party Advisory
http://www.debian.org/security/2016/dsa-3607	cve@mitre.org	Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3	cve@mitre.org	Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/04/19/1	cve@mitre.org	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/86534	cve@mitre.org	Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-2989-1	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-2996-1	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-2997-1	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-2998-1	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-3000-1	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-3001-1	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-3002-1	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-3003-1	cve@mitre.org	Third Party Advisory
http://www.ubuntu.com/usn/USN-3004-1	cve@mitre.org	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1328478	cve@mitre.org	Issue Tracking Third Party Advisory
https://github.com/torvalds/linux/commit/b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb	cve@mitre.org	Patch Vendor Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://www.debian.org/security/2016/dsa-3607	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/04/19/1	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://www.securityfocus.com/bid/86534	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-2989-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-2996-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-2997-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-2998-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-3000-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-3001-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-3002-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-3003-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.ubuntu.com/usn/USN-3004-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1328478	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Third Party Advisory
https://github.com/torvalds/linux/commit/b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory

Hyperlink: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://www.debian.org/security/2016/dsa-3607

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.openwall.com/lists/oss-security/2016/04/19/1

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://www.securityfocus.com/bid/86534

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.ubuntu.com/usn/USN-2989-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-2996-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-2997-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-2998-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-3000-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-3001-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-3002-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-3003-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-3004-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1328478

Source: cve@mitre.org

Resource:

Issue Tracking

Third Party Advisory

Hyperlink: https://github.com/torvalds/linux/commit/b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://www.debian.org/security/2016/dsa-3607

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.openwall.com/lists/oss-security/2016/04/19/1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://www.securityfocus.com/bid/86534

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.ubuntu.com/usn/USN-2989-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-2996-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-2997-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-2998-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-3000-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-3001-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-3002-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-3003-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: http://www.ubuntu.com/usn/USN-3004-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1328478

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Issue Tracking

Third Party Advisory

Hyperlink: https://github.com/torvalds/linux/commit/b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Similar CVEs

4039Records found

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-8.01% / 91.74%

||

7 Day CHG~0.00%

Published-13 Jan, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel adobe_air_sdk_and_compiler adobe_air_sdk windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-7.94% / 91.69%

||

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-12 Apr, 2025 | 10:46

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0327.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-windows flash_player mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-7.94% / 91.69%

||

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-12 Apr, 2025 | 10:46

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0323.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-windows flash_player mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-7.94% / 91.69%

||

7 Day CHG~0.00%

Published-06 Feb, 2015 | 00:00

Updated-12 Apr, 2025 | 10:46

Buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-windows flash_player mac_os_x linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Debian GNU/Linux

Matching Score-10

Assigner-Debian GNU/Linux

CVSS Score-10||HIGH

EPSS-7.80% / 91.59%

||

7 Day CHG~0.00%

Published-14 Apr, 2015 | 18:00

Updated-12 Apr, 2025 | 10:46

Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that trigger an error condition, related to binding octets to columns.

Vendor-n/a Debian GNU/Linux

Product-debian_linux dbd-firebird n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Fedora Project

Matching Score-10

Assigner-Fedora Project

CVSS Score-9.8||CRITICAL

EPSS-3.45% / 87.06%

||

7 Day CHG~0.00%

Published-18 Feb, 2022 | 17:50

Updated-03 Aug, 2024 | 17:01

A flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large (>=2GiB) IMAP literals, malicious or compromised IMAP servers, and hypothetically even external email senders, could cause several different buffer overflows, which could conceivably be exploited for remote code execution.

Vendor-isync_project n/a Debian GNU/Linux Red Hat, Inc.Fedora Project

Product-enterprise_linux debian_linux fedora isync isync

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-14.67% / 94.22%

||

7 Day CHG~0.00%

Published-21 Sep, 2007 | 18:00

Updated-07 Aug, 2024 | 12:03

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed packet that triggers "corrupt stack memory."

Vendor-n/a Canonical Ltd.VMware (Broadcom Inc.)

Product-workstation esx ubuntu_linux ace server player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-7.85% / 91.62%

||

7 Day CHG~0.00%

Published-13 Jan, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0304.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel adobe_air_sdk_and_compiler adobe_air_sdk windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-6.41% / 90.65%

||

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than other Flash Player buffer overflow CVEs listed in APSB12-22.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-3.10% / 86.28%

||

7 Day CHG~0.00%

Published-23 Mar, 2006 | 23:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (kmalloc'd memory corruption) via a remote NDIS response to OID_GEN_SUPPORTED_LIST, which causes memory to be allocated for the reply data but not the reply structure.

Vendor-n/a Linux Kernel Organization, Inc

Product-linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-1.94% / 82.69%

||

7 Day CHG~0.00%

Published-13 Jan, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.

Vendor-n/a Debian GNU/Linux Canonical Ltd.Fedora Project freedesktop.org

Product-ubuntu_linux fedora debian_linux libbsd n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-6.11% / 90.41%

||

7 Day CHG~0.00%

Published-13 May, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory and possibly execute arbitrary code via a crafted ECC point, which triggers a heap-based buffer overflow.

Vendor-botan_project n/a Debian GNU/Linux

Product-debian_linux botan n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-31.48% / 96.62%

||

7 Day CHG~0.00%

Published-25 Nov, 2014 | 23:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-06-15||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.

Vendor-n/a Adobe Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

Product-air flash_player linux_kernel macos air_sdk air_sdk_\&_compiler windows mac_os_x n/a Flash Player

CWE ID-CWE-416

Use After Free

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-10||HIGH

EPSS-1.12% / 77.32%

||

7 Day CHG~0.00%

Published-30 Apr, 2014 | 10:00

Updated-12 Apr, 2025 | 10:46

The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by painting on a CANVAS element.

Vendor-n/a Mozilla Corporation openSUSE Fedora Project Canonical Ltd.Oracle Corporation Microsoft Corporation

Product-solaris firefox opensuse seamonkey ubuntu_linux fedora windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-5.58% / 89.93%

||

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel adobe_air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-8.65% / 92.07%

||

7 Day CHG~0.00%

Published-11 Jun, 2014 | 10:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel adobe_air_sdk windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-92.95% / 99.77%

||

7 Day CHG~0.00%

Published-29 Apr, 2014 | 10:00

Updated-12 Apr, 2025 | 10:46

Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-windows flash_player linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-86.44% / 99.37%

||

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-12 Apr, 2025 | 10:46

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0559.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel adobe_air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-23.40% / 95.74%

||

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-12 Apr, 2025 | 10:46

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0589.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-5.58% / 89.93%

||

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0552.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel adobe_air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.38% / 58.68%

||

7 Day CHG~0.00%

Published-15 Nov, 2019 | 14:11

Updated-06 Aug, 2024 | 17:53

ClamAV before 0.97.7 has WWPack corrupt heap memory

Vendor-n/a Debian GNU/Linux Fedora Project ClamAV

Product-clamav debian_linux fedora n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-6.13% / 90.44%

||

7 Day CHG~0.00%

Published-09 Oct, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK before 3.4.0.2710 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than other Flash Player memory corruption CVEs listed in APSB12-22.

Vendor-n/a Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Linux Kernel Organization, Inc

Product-android flash_player windows adobe_air mac_os_x flash_player_for_android linux_kernel adobe_air_sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-2.95% / 85.91%

||

7 Day CHG~0.00%

Published-13 Nov, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-3.69% / 87.46%

||

7 Day CHG~0.00%

Published-31 Mar, 2015 | 14:00

Updated-12 Apr, 2025 | 10:46

Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecified impact via unknown vectors.

Vendor-n/a Debian GNU/Linux

Product-cifs-utils n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Mozilla Corporation

Matching Score-10

Assigner-Mozilla Corporation

CVSS Score-9.8||CRITICAL

EPSS-1.47% / 80.12%

||

7 Day CHG+0.29%

Published-19 Mar, 2014 | 10:00

Updated-12 Apr, 2025 | 10:46

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vendor-n/a Mozilla Corporation openSUSE SUSE Red Hat, Inc.Debian GNU/Linux Canonical Ltd.

Product-enterprise_linux_server enterprise_linux_eus firefox enterprise_linux_server_eus thunderbird suse_linux_enterprise_desktop debian_linux enterprise_linux_server_aus seamonkey firefox_esr ubuntu_linux enterprise_linux_desktop opensuse suse_linux_enterprise_server enterprise_linux_server_tus enterprise_linux_workstation suse_linux_enterprise_software_development_kit n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-5.58% / 89.93%

||

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel adobe_air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-19.32% / 95.14%

||

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-12 Apr, 2025 | 10:46

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel adobe_air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-5.58% / 89.93%

||

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0552, and CVE-2014-0555.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel adobe_air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Red Hat, Inc.

Matching Score-10

Assigner-Red Hat, Inc.

CVSS Score-9.8||CRITICAL

EPSS-2.71% / 85.32%

||

7 Day CHG~0.00%

Published-06 May, 2021 | 14:50

Updated-17 Oct, 2024 | 18:35

A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously crafted dirfile databases. This degrades the confidentiality, integrity and availability of third-party software that uses libgetdata as a library. This vulnerability may lead to arbitrary code execution or privilege escalation depending on input/skills of attacker.

Vendor-getdata_project n/a Debian GNU/Linux Fedora Project

Product-getdata debian_linux fedora getdata

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-416

Use After Free

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-9.66% / 92.59%

||

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-12 Apr, 2025 | 10:46

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0582.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-3.26% / 86.63%

||

7 Day CHG~0.00%

Published-21 Feb, 2014 | 02:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel adobe_air_sdk windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-5.58% / 89.93%

||

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0555.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel adobe_air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-11.53% / 93.35%

||

7 Day CHG~0.00%

Published-11 Sep, 2013 | 23:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-3363.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-11.53% / 93.35%

||

7 Day CHG~0.00%

Published-13 Nov, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5330.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-10||HIGH

EPSS-3.17% / 86.44%

||

7 Day CHG~0.00%

Published-05 Jun, 2013 | 00:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 27.0.1453.110 does not properly handle SSL sockets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Google LLC Debian GNU/Linux

Product-debian_linux chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-11.53% / 93.35%

||

7 Day CHG~0.00%

Published-11 Sep, 2013 | 23:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3362, CVE-2013-3363, and CVE-2013-5324.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-4.00% / 87.97%

||

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air enterprise_linux_server linux_kernel enterprise_linux_eus opensuse enterprise_linux_desktop enterprise_linux_server_eus adobe_air_sdk enterprise_linux_workstation linux_enterprise_desktop windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-4.00% / 87.97%

||

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air enterprise_linux_server linux_kernel enterprise_linux_eus opensuse enterprise_linux_desktop enterprise_linux_server_eus adobe_air_sdk enterprise_linux_workstation linux_enterprise_desktop windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-4.00% / 87.97%

||

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, and CVE-2013-3335.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air enterprise_linux_server linux_kernel enterprise_linux_eus opensuse enterprise_linux_desktop enterprise_linux_server_eus adobe_air_sdk enterprise_linux_workstation linux_enterprise_desktop windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-9.88% / 92.70%

||

7 Day CHG~0.00%

Published-10 Jul, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player linux_kernel windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-4.00% / 87.97%

||

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air enterprise_linux_server linux_kernel enterprise_linux_eus opensuse enterprise_linux_desktop enterprise_linux_server_eus adobe_air_sdk enterprise_linux_workstation linux_enterprise_desktop windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-4.00% / 87.97%

||

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, and CVE-2013-3334.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air enterprise_linux_server linux_kernel enterprise_linux_eus opensuse enterprise_linux_desktop enterprise_linux_server_eus adobe_air_sdk enterprise_linux_workstation linux_enterprise_desktop windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-4.00% / 87.97%

||

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air enterprise_linux_server linux_kernel enterprise_linux_eus opensuse enterprise_linux_desktop enterprise_linux_server_eus adobe_air_sdk enterprise_linux_workstation linux_enterprise_desktop windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-4.00% / 87.97%

||

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air enterprise_linux_server linux_kernel enterprise_linux_eus opensuse enterprise_linux_desktop enterprise_linux_server_eus adobe_air_sdk enterprise_linux_workstation linux_enterprise_desktop windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-2.03% / 83.06%

||

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air enterprise_linux_server linux_kernel enterprise_linux_eus opensuse enterprise_linux_desktop enterprise_linux_server_eus adobe_air_sdk enterprise_linux_workstation linux_enterprise_desktop windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-2.03% / 83.06%

||

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air enterprise_linux_server linux_kernel enterprise_linux_eus opensuse enterprise_linux_desktop enterprise_linux_server_eus adobe_air_sdk enterprise_linux_workstation linux_enterprise_desktop windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-4.00% / 87.97%

||

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air enterprise_linux_server linux_kernel enterprise_linux_eus opensuse enterprise_linux_desktop enterprise_linux_server_eus adobe_air_sdk enterprise_linux_workstation linux_enterprise_desktop windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-2.03% / 83.06%

||

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-flash_player adobe_air enterprise_linux_server linux_kernel enterprise_linux_eus opensuse enterprise_linux_desktop enterprise_linux_server_eus adobe_air_sdk enterprise_linux_workstation linux_enterprise_desktop windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-10||HIGH

EPSS-11.53% / 93.35%

||

7 Day CHG~0.00%

Published-11 Sep, 2013 | 23:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Android 4.x; Adobe AIR before 3.8.0.1430; and Adobe AIR SDK & Compiler before 3.8.0.1430 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3361, CVE-2013-3362, and CVE-2013-5324.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-9.46% / 92.50%

||

7 Day CHG~0.00%

Published-01 Nov, 2019 | 12:09

Updated-06 Aug, 2024 | 15:44

MiniDLNA has heap-based buffer overflow

Vendor-readymedia_project n/a Debian GNU/Linux

Product-readymedia debian_linux n/a

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer