PT-2014-1351 · Adobe+2 · Air Sdk & Compiler+4

Published

2014-05-13

·

Updated

2018-12-13

·

CVE-2014-0516

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 13.0.0.214 on Windows and OS X Adobe Flash Player versions prior to 11.2.202.359 on Linux Adobe AIR SDK versions prior to 13.0.0.111 Adobe AIR SDK & Compiler versions prior to 13.0.0.111
Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors, potentially enabling them to perform unauthorized actions.
Recommendations For Adobe Flash Player versions prior to 13.0.0.214 on Windows and OS X, update to version 13.0.0.214 or later. For Adobe Flash Player versions prior to 11.2.202.359 on Linux, update to version 11.2.202.359 or later. For Adobe AIR SDK versions prior to 13.0.0.111, update to version 13.0.0.111 or later. For Adobe AIR SDK & Compiler versions prior to 13.0.0.111, update to version 13.0.0.111 or later.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2015-00211
BDU:2015-00281
CVE-2014-0516
MGASA-2014-0220
RHSA-2014:0496
RHSA-2014_0496

Affected Products

Air Sdk
Air Sdk & Compiler
Flash Player
Red Hat
Suse