CVE-2014-0517

2014-05-1411:13:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2014-0517

adobe flash player

adobe air

sdk

access restrictions

vulnerability

cve-2014-0518

cve-2014-0519

cve-2014-0520

nvd

6.3 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.3%

JSON

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0518, CVE-2014-0519, and CVE-2014-0520.

CPENameOperatorVersion
adobe:flash_playeradobe flash playerlt13.0.0.214
adobe:flash_playeradobe flash playerlt11.2.202.359
adobe:adobe_airadobe adobe airlt13.0.0.111