CVE-2014-0517
HighSummary
Adobe Flash Player before version 13.0.0.214 on Windows and OS X and before version 11.2.202.359 on Linux, as well as Adobe AIR SDK before version 13.0.0.111, allow attackers to bypass intended access restrictions via unspecified vectors.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to system resources, posing a significant security threat to the organization.
Recommendation
It is recommended to update Adobe Flash Player and Adobe AIR SDK to the latest versions to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Adobe Flash Player, Adobe AIR SDK
See all- CVE-2014-0520High
Adobe Flash Player before version 13.0.0.214 on Windows and OS X and before version 11.2.202.359 on Linux, as well as Adobe AIR SDK before version 13.0.0.111, allow attackers to bypass intended access restrictions via unspecified vectors.
- CVE-2014-0519High
Adobe Flash Player before version 13.0.0.214 on Windows and OS X and before version 11.2.202.359 on Linux, as well as Adobe AIR SDK before version 13.0.0.111, allow attackers to bypass intended access restrictions via unspecified vectors.
- CVE-2014-0518High
Adobe Flash Player before version 13.0.0.214 on Windows and OS X and before version 11.2.202.359 on Linux, as well as Adobe AIR SDK before version 13.0.0.111, allows attackers to bypass intended access restrictions via unspecified vectors.
- CVE-2014-0516High
Adobe Flash Player before version 13.0.0.214 on Windows and OS X and before version 11.2.202.359 on Linux, as well as Adobe AIR SDK before version 13.0.0.111, allow remote attackers to bypass the Same Origin Policy via unspecified vectors.
Original NVD description (English source)
Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0518, CVE-2014-0519, and CVE-2014-0520.