CVE-2014-0569: Adobe Flash Player integer overflow allows arbitrary code execution

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 18 September 2026. Confidence: medium.

high priorityRemote code execution with full impact and very high EPSS, but the product is legacy and no KEV listing or confirmed in-the-wild exploitation is documented in this record.

What it is

Adobe Flash Player, AIR, AIR SDK and AIR SDK & Compiler contain an integer overflow (CWE-190) that permits attackers to execute arbitrary code. The flaw affects Flash Player before 13.0.0.250 and 14.x/15.x before 15.0.0.189 on Windows and OS X, before 11.2.202.411 on Linux, and the corresponding AIR builds. Because Flash content is widely rendered in browsers, this is a high-impact remote code execution issue.

Impact

An attacker can execute arbitrary code in the context of the affected runtime, giving full control of confidentiality, integrity and availability on the victim host. No privilege escalation is required beyond the user's own session.

Attack surface

Reachable over the network (AV:N) with medium attack complexity (AC:M) and no authentication (Au:N), typically by delivering crafted Flash content to a browser or AIR application. User interaction is implied by the need to load the malicious content, though the vector does not explicitly state it.

Exploitation

Not listed in CISA KEV and no ransomware association is documented, but EPSS is very high (0.91326, 99.8th percentile), indicating strong likelihood of exploitation activity. References are vendor advisories, patch notes and third-party VDB entries; no public exploit code is cited in the record.

What to do

• Update Adobe Flash Player to 13.0.0.250 or later, 15.0.0.189 or later on Windows/OS X, and 11.2.202.411 or later on Linux.
• Update Adobe AIR to 15.0.0.293 and AIR SDK / AIR SDK & Compiler to 15.0.0.302 or later.
• Apply the referenced Linux distribution updates (openSUSE, SUSE) for bundled Flash packages.
• Disable or remove Flash Player where it is not required, and restrict Flash content to trusted sites.
• Enforce browser settings that require click-to-play for Flash content to reduce drive-by exposure.

Detection

• Monitor for Flash Player or AIR processes spawning unexpected child processes or writing executables to user-writable paths.
• Alert on network fetches of SWF content from untrusted or newly registered domains followed by process creation.
• Check endpoint inventories for Flash Player and AIR versions below the fixed builds listed in APSB14-22.
• Review proxy and IDS logs for known Flash exploit delivery patterns and suspicious SWF downloads.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.