Vulnerability CVE-2014-0503: Information

Description

Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

Severity: MEDIUM (6.4)

Published: March 12, 2014
Modified: Dec. 13, 2018
Error type identifier: CWE-264

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
adobe-flash-playerp911-alt2732-alt1110ALT-PU-2014-1283-1116324Fixed
adobe-flash-playerc9f211-alt2732-alt117ALT-PU-2014-1283-1116324Fixed
adobe-flash-playerc711-alt2711-alt29ALT-PU-2014-1289-1116412Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
http://helpx.adobe.com/security/products/flash-player/apsb14-08.html
  • Vendor Advisory
SUSE-SU-2014:0387
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2014:0379
  • Mailing List
  • Third Party Advisory
RHSA-2014:0289
  • Third Party Advisory
GLSA-201405-04
  • Third Party Advisory
    1. Configuration 1

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

      Configuration 2

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*