Lucene search

K
nvd[email protected]NVD:CVE-2014-0548
HistorySep 10, 2014 - 1:55 a.m.

CVE-2014-0548

2014-09-1001:55:06
CWE-264
web.nvd.nist.gov
6

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0.028

Percentile

90.6%

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.

Affected configurations

Nvd
Node
adobeadobe_airRange14.0.0.179
OR
adobeadobe_airMatch13.0.0.83
OR
adobeadobe_airMatch13.0.0.111
OR
adobeadobe_airMatch14.0.0.110
OR
adobeadobe_airMatch14.0.0.137
AND
googleandroid
Node
adobeadobe_air_sdkRange14.0.0.178
OR
adobeadobe_air_sdkMatch13.0.0.83
OR
adobeadobe_air_sdkMatch13.0.0.111
OR
adobeadobe_air_sdkMatch14.0.0.110
OR
adobeadobe_air_sdkMatch14.0.0.137
Node
adobeflash_playerRange13.0.0.241
OR
adobeflash_playerMatch13.0.0.182
OR
adobeflash_playerMatch13.0.0.201
OR
adobeflash_playerMatch13.0.0.206
OR
adobeflash_playerMatch13.0.0.214
OR
adobeflash_playerMatch13.0.0.223
OR
adobeflash_playerMatch13.0.0.231
OR
adobeflash_playerMatch14.0.0.125
OR
adobeflash_playerMatch14.0.0.145
OR
adobeflash_playerMatch14.0.0.176
OR
adobeflash_playerMatch14.0.0.179
OR
adobeflash_playerMatch15.0.0.144
AND
applemac_os_x
OR
microsoftwindows
Node
adobeflash_playerRange11.2.202.400
OR
adobeflash_playerMatch11.2.202.223
OR
adobeflash_playerMatch11.2.202.228
OR
adobeflash_playerMatch11.2.202.233
OR
adobeflash_playerMatch11.2.202.235
OR
adobeflash_playerMatch11.2.202.236
OR
adobeflash_playerMatch11.2.202.238
OR
adobeflash_playerMatch11.2.202.243
OR
adobeflash_playerMatch11.2.202.251
OR
adobeflash_playerMatch11.2.202.258
OR
adobeflash_playerMatch11.2.202.261
OR
adobeflash_playerMatch11.2.202.262
OR
adobeflash_playerMatch11.2.202.270
OR
adobeflash_playerMatch11.2.202.273
OR
adobeflash_playerMatch11.2.202.275
OR
adobeflash_playerMatch11.2.202.280
OR
adobeflash_playerMatch11.2.202.285
OR
adobeflash_playerMatch11.2.202.291
OR
adobeflash_playerMatch11.2.202.297
OR
adobeflash_playerMatch11.2.202.310
OR
adobeflash_playerMatch11.2.202.332
OR
adobeflash_playerMatch11.2.202.335
OR
adobeflash_playerMatch11.2.202.336
OR
adobeflash_playerMatch11.2.202.341
OR
adobeflash_playerMatch11.2.202.346
OR
adobeflash_playerMatch11.2.202.350
OR
adobeflash_playerMatch11.2.202.356
OR
adobeflash_playerMatch11.2.202.359
OR
adobeflash_playerMatch11.2.202.378
OR
adobeflash_playerMatch11.2.202.394
AND
linuxlinux_kernel
Node
adobeadobe_airRange14.0.0.178
OR
adobeadobe_airMatch13.0.0.83
OR
adobeadobe_airMatch13.0.0.111
OR
adobeadobe_airMatch14.0.0.110
OR
adobeadobe_airMatch14.0.0.137
AND
applemac_os_x
OR
microsoftwindows
VendorProductVersionCPE
adobeadobe_air*cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*
adobeadobe_air13.0.0.83cpe:2.3:a:adobe:adobe_air:13.0.0.83:*:*:*:*:*:*:*
adobeadobe_air13.0.0.111cpe:2.3:a:adobe:adobe_air:13.0.0.111:*:*:*:*:*:*:*
adobeadobe_air14.0.0.110cpe:2.3:a:adobe:adobe_air:14.0.0.110:*:*:*:*:*:*:*
adobeadobe_air14.0.0.137cpe:2.3:a:adobe:adobe_air:14.0.0.137:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
adobeadobe_air_sdk*cpe:2.3:a:adobe:adobe_air_sdk:*:*:*:*:*:*:*:*
adobeadobe_air_sdk13.0.0.83cpe:2.3:a:adobe:adobe_air_sdk:13.0.0.83:*:*:*:*:*:*:*
adobeadobe_air_sdk13.0.0.111cpe:2.3:a:adobe:adobe_air_sdk:13.0.0.111:*:*:*:*:*:*:*
adobeadobe_air_sdk14.0.0.110cpe:2.3:a:adobe:adobe_air_sdk:14.0.0.110:*:*:*:*:*:*:*
Rows per page:
1-10 of 551

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0.028

Percentile

90.6%