PT-2014-1351 · Adobe+2 · Air Sdk & Compiler+4

Publicado

2014-05-13

·

Atualizado

2018-12-13

·

CVE-2014-0516

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 13.0.0.214 on Windows and OS X Adobe Flash Player versions prior to 11.2.202.359 on Linux Adobe AIR SDK versions prior to 13.0.0.111 Adobe AIR SDK & Compiler versions prior to 13.0.0.111
Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors, potentially enabling them to perform unauthorized actions.
Recommendations For Adobe Flash Player versions prior to 13.0.0.214 on Windows and OS X, update to version 13.0.0.214 or later. For Adobe Flash Player versions prior to 11.2.202.359 on Linux, update to version 11.2.202.359 or later. For Adobe AIR SDK versions prior to 13.0.0.111, update to version 13.0.0.111 or later. For Adobe AIR SDK & Compiler versions prior to 13.0.0.111, update to version 13.0.0.111 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2015-00211
BDU:2015-00281
CVE-2014-0516
MGASA-2014-0220
RHSA-2014:0496
RHSA-2014_0496

Produtos afetados

Air Sdk
Air Sdk & Compiler
Flash Player
Red Hat
Suse