PT-2014-1373 · Adobe+2 · Flash Player+5
Mikiadobe
·
Publicado
2014-08-13
·
Atualizado
2017-09-08
·
CVE-2014-5333
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Adobe Flash Player versions prior to 13.0.0.241 and 14.x prior to 14.0.0.176 on Windows and OS X and prior to 11.2.202.400 on Linux
Adobe AIR versions prior to 14.0.0.178 on Windows and OS X and prior to 14.0.0.179 on Android
Adobe AIR SDK versions prior to 14.0.0.178
Adobe AIR SDK & Compiler versions prior to 14.0.0.178
Description
The issue exists due to an incomplete fix for a previous vulnerability, allowing remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints and obtain sensitive information. This is achieved by using a crafted OBJECT element with SWF content that satisfies the character-set requirements of a callback API, in conjunction with a manipulation involving a
$ (dollar sign) or ( (open parenthesis) character.Recommendations
For Adobe Flash Player versions prior to 13.0.0.241 and 14.x prior to 14.0.0.176 on Windows and OS X and prior to 11.2.202.400 on Linux, update to a version that properly restricts the SWF file format.
For Adobe AIR versions prior to 14.0.0.178 on Windows and OS X and prior to 14.0.0.179 on Android, update to a version that properly restricts the SWF file format.
For Adobe AIR SDK versions prior to 14.0.0.178, update to a version that properly restricts the SWF file format.
For Adobe AIR SDK & Compiler versions prior to 14.0.0.178, update to a version that properly restricts the SWF file format.
As a temporary workaround, consider disabling the use of SWF content in OBJECT elements to minimize the risk of exploitation.
Correção
CSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Air
Air Sdk
Air Sdk & Compiler
Flash Player
Red Hat
Suse