Cross site scripting

2014-06-1110:57:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.3%

JSON

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0532 and CVE-2014-0533.

CPENameOperatorVersion
adobe_airle13.0.0.111
adobe_aireq13.0.0.83
adobe_air_sdkle13.0.0.111
adobe_air_sdkeq13.0.0.83
flash_playerle13.0.0.214
flash_playereq13.0.0.182
flash_playereq13.0.0.201
flash_playereq13.0.0.206
flash_playerle11.2.202.359
flash_playereq11.2.202.223

Name	Operator	Version
adobe_air	le	13.0.0.111
adobe_air	eq	13.0.0.83
adobe_air_sdk	le	13.0.0.111
adobe_air_sdk	eq	13.0.0.83
flash_player	le	13.0.0.214
flash_player	eq	13.0.0.182
flash_player	eq	13.0.0.201
flash_player	eq	13.0.0.206
flash_player	le	11.2.202.359
flash_player	eq	11.2.202.223