CVE-2014-0543 is a critical memory address disclosure vulnerability affecting multiple versions of Adobe Flash Player, Adobe AIR, Adobe AIR SDK, and Adobe AIR SDK & Compiler across Windows, OS X, Linux, and Android platforms. This flaw allows attackers to bypass Address Space Layout Randomization (ASLR), a key security mechanism, through unspecified vectors. With a CVSS score of 10.0, this vulnerability is highly severe, indicating a complete compromise of confidentiality, integrity, and availability with low attack complexity and no authentication required. While there is no public exploit code available in Metasploit, Nuclei, or ExploitDB, SecurityWeek reported that this vulnerability was leveraged in targeted attacks, indicating active exploitation at the time.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 13.0.0.231CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | ||
13.0.0.182CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:13.0.0.182:*:*:*:*:*:*:* | ||
13.0.0.201CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:13.0.0.201:*:*:*:*:*:*:* | ||
13.0.0.206CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:13.0.0.206:*:*:*:*:*:*:* | ||
13.0.0.214CPE matchmatch criteria | cpe:2.3:a:adobe:flash_player:13.0.0.214:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.