Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveAdobeCVE-2014-0548
HistorySep 10, 2014 - 1:55 a.m.

CVE-2014-0548

2014-09-1001:55:06
CWE-264
adobe
web.nvd.nist.gov
42
cve
2014
0548
adobe flash player
remote attackers
same origin policy
nvd
security vulnerability
bypass
vectors

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.028

Percentile

90.6%

JSON

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.

Affected configurations

Nvd
Node
adobeadobe_airRange≤14.0.0.179
OR
adobeadobe_airMatch13.0.0.83
OR
adobeadobe_airMatch13.0.0.111
OR
adobeadobe_airMatch14.0.0.110
OR
adobeadobe_airMatch14.0.0.137
AND
googleandroid
Node
adobeadobe_air_sdkRange≤14.0.0.178
OR
adobeadobe_air_sdkMatch13.0.0.83
OR
adobeadobe_air_sdkMatch13.0.0.111
OR
adobeadobe_air_sdkMatch14.0.0.110
OR
adobeadobe_air_sdkMatch14.0.0.137
Node
adobeflash_playerRange≤13.0.0.241
OR
adobeflash_playerMatch13.0.0.182
OR
adobeflash_playerMatch13.0.0.201
OR
adobeflash_playerMatch13.0.0.206
OR
adobeflash_playerMatch13.0.0.214
OR
adobeflash_playerMatch13.0.0.223
OR
adobeflash_playerMatch13.0.0.231
OR
adobeflash_playerMatch14.0.0.125
OR
adobeflash_playerMatch14.0.0.145
OR
adobeflash_playerMatch14.0.0.176
OR
adobeflash_playerMatch14.0.0.179
OR
adobeflash_playerMatch15.0.0.144
AND
applemac_os_x
OR
microsoftwindows
Node
adobeflash_playerRange≤11.2.202.400
OR
adobeflash_playerMatch11.2.202.223
OR
adobeflash_playerMatch11.2.202.228
OR
adobeflash_playerMatch11.2.202.233
OR
adobeflash_playerMatch11.2.202.235
OR
adobeflash_playerMatch11.2.202.236
OR
adobeflash_playerMatch11.2.202.238
OR
adobeflash_playerMatch11.2.202.243
OR
adobeflash_playerMatch11.2.202.251
OR
adobeflash_playerMatch11.2.202.258
OR
adobeflash_playerMatch11.2.202.261
OR
adobeflash_playerMatch11.2.202.262
OR
adobeflash_playerMatch11.2.202.270
OR
adobeflash_playerMatch11.2.202.273
OR
adobeflash_playerMatch11.2.202.275
OR
adobeflash_playerMatch11.2.202.280
OR
adobeflash_playerMatch11.2.202.285
OR
adobeflash_playerMatch11.2.202.291
OR
adobeflash_playerMatch11.2.202.297
OR
adobeflash_playerMatch11.2.202.310
OR
adobeflash_playerMatch11.2.202.332
OR
adobeflash_playerMatch11.2.202.335
OR
adobeflash_playerMatch11.2.202.336
OR
adobeflash_playerMatch11.2.202.341
OR
adobeflash_playerMatch11.2.202.346
OR
adobeflash_playerMatch11.2.202.350
OR
adobeflash_playerMatch11.2.202.356
OR
adobeflash_playerMatch11.2.202.359
OR
adobeflash_playerMatch11.2.202.378
OR
adobeflash_playerMatch11.2.202.394
AND
linuxlinux_kernel
Node
adobeadobe_airRange≤14.0.0.178
OR
adobeadobe_airMatch13.0.0.83
OR
adobeadobe_airMatch13.0.0.111
OR
adobeadobe_airMatch14.0.0.110
OR
adobeadobe_airMatch14.0.0.137
AND
applemac_os_x
OR
microsoftwindows
VendorProductVersionCPE
adobeadobe_air*cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*
adobeadobe_air13.0.0.83cpe:2.3:a:adobe:adobe_air:13.0.0.83:*:*:*:*:*:*:*
adobeadobe_air13.0.0.111cpe:2.3:a:adobe:adobe_air:13.0.0.111:*:*:*:*:*:*:*
adobeadobe_air14.0.0.110cpe:2.3:a:adobe:adobe_air:14.0.0.110:*:*:*:*:*:*:*
adobeadobe_air14.0.0.137cpe:2.3:a:adobe:adobe_air:14.0.0.137:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
adobeadobe_air_sdk*cpe:2.3:a:adobe:adobe_air_sdk:*:*:*:*:*:*:*:*
adobeadobe_air_sdk13.0.0.83cpe:2.3:a:adobe:adobe_air_sdk:13.0.0.83:*:*:*:*:*:*:*
adobeadobe_air_sdk13.0.0.111cpe:2.3:a:adobe:adobe_air_sdk:13.0.0.111:*:*:*:*:*:*:*
adobeadobe_air_sdk14.0.0.110cpe:2.3:a:adobe:adobe_air_sdk:14.0.0.110:*:*:*:*:*:*:*
Rows per page:
1-10 of 551

Related

checkpoint_advisories 1
nvd 1
prion 1
cvelist 1
ubuntucve 1
redhat 1
suse 3
nessus 15
mageia 1
openvas 9
freebsd 1
gentoo 1
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Same Origin Policy Bypass (APSB14-21: CVE-2014-0548)
2015-05-11 00:00:00
nvd
nvd
CVE-2014-0548
2014-09-10 01:55:06
prion
prion
Design/Logic Flaw
2014-09-10 01:55:00
cvelist
cvelist
CVE-2014-0548
2014-09-10 01:00:00
ubuntucve
ubuntucve
CVE-2014-0548
2014-09-10 00:00:00
redhat
redhat
(RHSA-2014:1173) Critical: flash-plugin security update
2014-09-10 00:00:00
suse
suse
update flash-player to 11.2.202.40 (important)
2014-09-16 01:04:20
flash-player to 11.2.202.40 (important)
2014-09-10 17:04:13
Security update for flash-player (important)
2014-09-13 01:04:17
nessus
nessus
Flash Player < 15.0.0.152 Multiple Vulnerabilities (APSB14-21)
2014-09-10 00:00:00
Flash Player for Mac <= 14.0.0.179 Multiple Vulnerabilities (APSB14-21)
2014-09-10 00:00:00
Adobe AIR <= AIR 14.0.0.178 Multiple Vulnerabilities (APSB14-21)
2014-09-10 00:00:00
mageia
mageia
Updated flash-player-plugin packages fix multiple security vulnerabilities
2014-09-22 12:31:24
openvas
openvas
Adobe AIR Multiple Vulnerabilities-01 (Sep 2014) - Mac OS X
2014-09-12 00:00:00
Gentoo Security Advisory GLSA 201409-05
2015-09-29 00:00:00
Adobe Flash Player Multiple Vulnerabilities-01 (Sep 2014) - Linux
2014-09-12 00:00:00
freebsd
freebsd
Flash player -- Multiple security vulnerabilities in www/linux-*-flashplugin11
2014-09-09 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2014-09-19 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.028

Percentile

90.6%

JSON
Related for CVE-2014-0548
checkpoint_advisories1nvd1prion1cvelist1ubuntucve1redhat1suse3nessus15mageia1openvas9freebsd1gentoo1