CVE-2014-0509

flash-plugin: cross-site scripting flaw (APSB14-09)

Published Apr 8, 2014 CVSS 2.0 · 4.3 Medium EPSS 2.8% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2014-0540 Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
adobe
Published
Updated
Aug 6, 2024, 9:20 AM
Reserved
Dec 20, 2013, 12:00 AM
Status
Modified
Published
Apr 8, 2014, 11:55 PM
Modified
Jun 17, 2026, 12:03 AM
Severity
Moderate
Public date
Apr 8, 2014, 12:00 AM