CVE-2014-0492 in Flash Player
Summary
Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an "address leak."
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
12/20/2013
Disclosure
01/15/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 11957 | Adobe Flash Player Address Layout Randomizer access control | 264 | Unproven | Official fix | CVE-2014-0492 |