Information disclosure in Adobe Flash Player for Linux and Adobe Flash Player - CVE-2014-9162

Vulnerability identifier: #VU5228

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2014-9162

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The weakness exists due to unknown error. A remote attacker can read important data on the affected system.

Successful exploitation of the vulnerability results in information disclosure on the vulnerable system.

Adobe Flash Player for Linux
Adobe Flash Player
Arch Linux
Gentoo Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation

Install update from vendor's website.

• https://helpx.adobe.com/security/products/flash-player/apsb14-27.html

• Multiple vulnerabilities in Adobe Flash Player
• Arch Linux update for flashplugin
• Gentoo update for Adobe Flash Player
• SUSE Linux update for flash-player
• OpenSUSE Linux update for flash-player
• OpenSUSE Linux update for flash-player
• Red Hat update for flash-plugin