PT-2014-1373 · Adobe+2 · Flash Player+5
Mikiadobe
·
Published
2014-08-13
·
Updated
2017-09-08
·
CVE-2014-5333
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Adobe Flash Player versions prior to 13.0.0.241 and 14.x prior to 14.0.0.176 on Windows and OS X and prior to 11.2.202.400 on Linux
Adobe AIR versions prior to 14.0.0.178 on Windows and OS X and prior to 14.0.0.179 on Android
Adobe AIR SDK versions prior to 14.0.0.178
Adobe AIR SDK & Compiler versions prior to 14.0.0.178
Description
The issue exists due to an incomplete fix for a previous vulnerability, allowing remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints and obtain sensitive information. This is achieved by using a crafted OBJECT element with SWF content that satisfies the character-set requirements of a callback API, in conjunction with a manipulation involving a
$ (dollar sign) or ( (open parenthesis) character.Recommendations
For Adobe Flash Player versions prior to 13.0.0.241 and 14.x prior to 14.0.0.176 on Windows and OS X and prior to 11.2.202.400 on Linux, update to a version that properly restricts the SWF file format.
For Adobe AIR versions prior to 14.0.0.178 on Windows and OS X and prior to 14.0.0.179 on Android, update to a version that properly restricts the SWF file format.
For Adobe AIR SDK versions prior to 14.0.0.178, update to a version that properly restricts the SWF file format.
For Adobe AIR SDK & Compiler versions prior to 14.0.0.178, update to a version that properly restricts the SWF file format.
As a temporary workaround, consider disabling the use of SWF content in OBJECT elements to minimize the risk of exploitation.
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Air
Air Sdk
Air Sdk & Compiler
Flash Player
Red Hat
Suse