Oval Definition:	oval:org.cisecurity:def:1252
Revision Date: 2016-11-11 Version: 21 Title: Vulnerability in Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239, Adobe AIR before 15.0.0.293 - CVE-2014-8439 Description: Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK and Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2014-8439 Platform(s): Microsoft Windows 10 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Vista Microsoft Windows XP Product(s): ActiveX Control Adobe Flash Player Pepper Flash Definition Synopsis Adobe Flash Player Adobe Flash Player is installed AND Adobe Flash Player version Check if Adobe Flash Player (ESR) version is less than 13.0.0.258 OR Adobe Flash Player Check if Adobe Flash Player version is less than 15.0.0.239 AND Check if Adobe Flash Player version is greater than or equal to 14.0.0.0 OR Pepper Flash for Google Chrome version Google Chrome is installed AND Check if Pepper Flash for Google Chrome version is less than 15.0.0.239 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Check if the ESR version of Flash.ocx is less than 13.0.0.258 OR ActiveX Control version Check if Flash*.ocx version is less than 15.0.0.239 AND Check if Flash*.ocx version is greater than or equal to 14.0.0.0
BACK