CVE-2014-0520

2014-05-1411:13:05

CWE-264

adobe

web.nvd.nist.gov

cve

adobe flash player

adobe air sdk

access restrictions

security vulnerability

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.4

Confidence

Low

EPSS

0.01

Percentile

83.4%

JSON

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0519.

Affected configurations

Nvd

Node

adobeflash_playerRange13.0–13.0.0.214

AND

applemac_os_x

microsoftwindowsMatch-

Node

adobeflash_playerRange11.0–11.2.202.359

AND

linuxlinux_kernel

Node

adobeadobe_airRange<13.0.0.111

VendorProductVersionCPE
adobeflash_player*cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
adobeadobe_air*cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	flash_player	*	cpe:2.3:a:adobe:flash_player::::::::
apple	mac_os_x	*	cpe:2.3:o:apple:mac_os_x::::::::
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
adobe	adobe_air	*	cpe:2.3:a:adobe:adobe_air::::::::