PT-2014-1359 · Adobe+3 · Air Sdk & Compiler+6

Publicado

2014-06-10

·

Atualizado

2017-12-22

·

CVE-2014-0534

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 13.0.0.223 Adobe Flash Player versions 14.x prior to 14.0.0.125 Adobe Flash Player version 11.2.202.378 and earlier on Linux Adobe AIR versions prior to 14.0.0.110 Adobe AIR SDK versions prior to 14.0.0.110 Adobe AIR SDK & Compiler versions prior to 14.0.0.110
Description The issue allows attackers to bypass intended access restrictions via unspecified vectors. This affects multiple Adobe products, including Adobe Flash Player, Adobe AIR, Adobe AIR SDK, and Adobe AIR SDK & Compiler.
Recommendations For Adobe Flash Player versions prior to 13.0.0.223, update to version 13.0.0.223 or later. For Adobe Flash Player versions 14.x prior to 14.0.0.125, update to version 14.0.0.125 or later. For Adobe Flash Player version 11.2.202.378 and earlier on Linux, update to version 11.2.202.378 or later. For Adobe AIR versions prior to 14.0.0.110, update to version 14.0.0.110 or later. For Adobe AIR SDK versions prior to 14.0.0.110, update to version 14.0.0.110 or later. For Adobe AIR SDK & Compiler versions prior to 14.0.0.110, update to version 14.0.0.110 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2014-1787
BDU:2015-00219
BDU:2015-00296
BDU:2015-00297
CVE-2014-0534
MGASA-2014-0261
RHSA-2014:0745
RHSA-2014_0745

Produtos afetados

Alt Linux
Air
Air Sdk
Air Sdk & Compiler
Flash Player
Red Hat
Suse