CVE-2014-8439: Adobe Flash Player Dereferenced Pointer Vulnerability

CISA Known Exploited Vulnerability (KEV)

Description

Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.

Required action (CISA)

The impacted product is end-of-life and should be disconnected if still in use.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2014-8439

Weakness behind it

CISA records this vulnerability as an instance of CWE-119. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-8439
• KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog