CVEvulnerability

CVE-2014-0509

4.3 MEDIUM Published 2014-04-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-04-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

• adobe flash player 11.0 • adobe flash player 11.0.1.152 • adobe flash player 11.0.1.153 • adobe flash player 11.1 • adobe flash player 11.1.102.55 • adobe flash player 11.1.102.59 • adobe flash player 11.1.102.62 • adobe flash player 11.1.102.63 • adobe flash player 11.1.111.8 • adobe flash player 11.1.111.44 • adobe flash player 11.1.111.50 • adobe flash player 11.1.111.54 • adobe flash player 11.1.115.7 • adobe flash player 11.1.115.34 • adobe flash player 11.1.115.48 • adobe flash player 11.1.115.54 • adobe flash player 11.1.115.58 • adobe flash player 11.2.202.223 • adobe flash player 11.2.202.228 • adobe flash player 11.2.202.233 • adobe flash player 11.2.202.235 • adobe flash player 11.2.202.236 • adobe flash player 11.2.202.238 • adobe flash player 11.2.202.243 • adobe flash player 11.2.202.251 • adobe flash player 11.2.202.258 • adobe flash player 11.2.202.261 • adobe flash player 11.2.202.262 • adobe flash player 11.2.202.270 • adobe flash player 11.2.202.273 • adobe flash player 11.2.202.275 • adobe flash player 11.2.202.280 • adobe flash player 11.2.202.285 • adobe flash player 11.3.300.257 • adobe flash player 11.3.300.262 • adobe flash player 11.3.300.265 • adobe flash player 11.3.300.268 • adobe flash player 11.3.300.270 • adobe flash player 11.3.300.271 • adobe flash player 11.3.300.273 • adobe flash player 11.4.402.265 • adobe flash player 11.4.402.278 • adobe flash player 11.4.402.287 • adobe flash player 11.5.502.110 • adobe flash player 11.5.502.135 • adobe flash player 11.5.502.136 • adobe flash player 11.5.502.146 • adobe flash player 11.5.502.149 • adobe flash player 11.6.602.167 • adobe flash player 11.6.602.168 • adobe flash player 11.6.602.171 • adobe flash player 11.6.602.180 • adobe flash player 11.7.700.169 • adobe flash player 11.7.700.202 • adobe flash player 11.7.700.224 • adobe flash player 11.7.700.232 • adobe flash player 11.7.700.242 • adobe flash player 11.7.700.252 • adobe flash player 11.7.700.257 • adobe flash player 11.7.700.260 … and 99 more

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References