CVE:CVE-2014-0540
CNNVD:CNNVD-201408-216
Adobe Flash Player、Adobe AIR SDK和Adobe AIR SDK & Compiler都是美国奥多比（Adobe）公司的产品。Adobe Flash Player是一款多媒体播放器产品；Adobe AIR SDK和Adobe AIR SDK & Compiler都是适用于Adobe AIR（一个跨操作系统的运行时环境）的标准开发工具包。
多款Adobe产品中存在安全漏洞，该漏洞源于程序没有正确限制访问内存地址。攻击者可利用该漏洞绕过ASLR保护机制，控制受影响系统。以下产品和版本受到影响：基于Windows和OS X平台的Adobe Flash Player 14.0.0.145及之前版本，基于Linux平台的Adobe Flash Player 11.2.202.394及之前版本，基于Windows和OS X平台的Adobe AIR 14.0.0.110及之前版本，Adobe AIR SDK 14.0.0.137及之前版本，Adobe AIR SDK & Compiler 14.0.0.137及之前版本，基于Android平台的Adobe AIR 14.0.0.137及之前版本。
solution:Upgrade adobe adobe_air_sdk to a higher version than 14.0.0.137,13.0.0.83,13.0.0.111,14.0.0.110,and avoid the version (,14.0.0.137],13.0.0.83,13.0.0.111,14.0.0.110; Upgrade adobe adobe_air to a higher version than 14.0.0.137,13.0.0.83,13.0.0.111,14.0.0.110,14.0.0.110,and avoid the version (,14.0.0.137],13.0.0.83,13.0.0.111,14.0.0.110,(,14.0.0.110]; Upgrade adobe flash_player to a higher version than 13.0.0.231,13.0.0.182,13.0.0.201,13.0.0.206,13.0.0.214,13.0.0.223,14.0.0.125,14.0.0.145,11.2.202.394,11.2.202.223,11.2.202.228,11.2.202.233,11.2.202.235,11.2.202.236,11.2.202.238,11.2.202.243,11.2.202.251,11.2.202.258,11.2.202.261,11.2.202.262,11.2.202.270,11.2.202.273,11.2.202.275,11.2.202.280,11.2.202.285,11.2.202.291,11.2.202.297,11.2.202.310,11.2.202.332,11.2.202.335,11.2.202.336,11.2.202.341,11.2.202.346,11.2.202.350,11.2.202.356,11.2.202.359,11.2.202.378,and avoid the version (,13.0.0.231],13.0.0.182,13.0.0.201,13.0.0.206,13.0.0.214,13.0.0.223,14.0.0.125,14.0.0.145,(,11.2.202.394],11.2.202.223,11.2.202.228,11.2.202.233,11.2.202.235,11.2.202.236,11.2.202.238,11.2.202.243,11.2.202.251,11.2.202.258,11.2.202.261,11.2.202.262,11.2.202.270,11.2.202.273,11.2.202.275,11.2.202.280,11.2.202.285,11.2.202.291,11.2.202.297,11.2.202.310,11.2.202.332,11.2.202.335,11.2.202.336,11.2.202.341,11.2.202.346,11.2.202.350,11.2.202.356,11.2.202.359,11.2.202.378