CVE-2014-0503

Published: Mar 12, 2014Modified: May 6, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

Affected (3)

Products: Adobe: Flash Player

Adobe

1 product

Flash Player

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Adobe Flash Player	From 11.0 to 11.2.202.346

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Configuration B

2 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Adobe Flash Player	From 11.0 to 11.7.700.272
Adobe Flash Player	From 11.8 to 12.0.0.77

Running on/with	Platform Versions
Apple Mac Os X	All versions
Microsoft Windows	All versions

Related CWEs

CWE-264

References (10)

http://helpx.adobe.com/security/products/flash-player/apsb14-08.html

Source: psirt@adobe.com

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00013.html

Source: psirt@adobe.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00014.html

Source: psirt@adobe.com

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-0289.html

Source: psirt@adobe.com

Third Party Advisory

http://security.gentoo.org/glsa/glsa-201405-04.xml

Source: psirt@adobe.com

Third Party Advisory

http://helpx.adobe.com/security/products/flash-player/apsb14-08.html