CVE-2014-0499

Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.

• CWE-264

• http://helpx.adobe.com/security/products/flash-player/apsb14-07.htmlPatch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00014.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00015.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00017.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0196.htmlThird Party Advisory
• http://security.gentoo.org/glsa/glsa-201405-04.xmlThird Party Advisory
• http://helpx.adobe.com/security/products/flash-player/apsb14-07.htmlPatch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00014.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00015.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00017.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0196.htmlThird Party Advisory
• http://security.gentoo.org/glsa/glsa-201405-04.xmlThird Party Advisory

Published

Feb 21, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0493Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before …
• CVE-2014-0494Adobe Digital Editions 2.0.1 allows attackers to execute arb…
• CVE-2014-0495Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before …
• CVE-2014-0496Use-after-free vulnerability in Adobe Reader and Acrobat 10.…8.8
• CVE-2014-0497Integer underflow in Adobe Flash Player before 11.7.700.261 …9.8
• CVE-2014-0498Stack-based buffer overflow in Adobe Flash Player before 11.…
• CVE-2014-0500Adobe Shockwave Player before 12.0.9.149 allows remote attac…
• CVE-2014-0501Adobe Shockwave Player before 12.0.9.149 allows remote attac…
• CVE-2014-0502Double free vulnerability in Adobe Flash Player before 11.7.…8.8
• CVE-2014-0503Adobe Flash Player before 11.7.700.272 and 11.8.x through 12…
• CVE-2014-0504Adobe Flash Player before 11.7.700.272 and 11.8.x through 12…
• CVE-2014-0505Adobe Shockwave Player before 12.1.0.150 allows remote attac…