Adobe Flash Player and AIR Buffer Overflow (CVE-2014-0507)

Release date:
Updated on:

Affected Systems:
Adobe Flash Player 11.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 66701
CVE (CAN) ID: CVE-2014-0507
 
Adobe Flash Player is an integrated multimedia Player. Adobe AIR is a technology developed based on the combination of network and desktop applications. It can control cloud programs on the network without having to use a browser.
 
Adobe Flash Player and AIR 11.2.202.346 have multiple security vulnerabilities. Attackers can exploit this vulnerability to cause buffer overflow.
 
<* Source: Bas Venis

Link: http://secunia.com/advisories/57661/
Http://helpx.adobe.com/security/products/flash-player/apsb14-09.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Adobe
-----
Adobe has released a Security Bulletin (apsb14-09) and patches for this:
Apsb14-09: APSB14-09
Link: http://helpx.adobe.com/security/products/flash-player/apsb14-09.html