CVE-2014-0503
First published: Wed Mar 12 2014(Updated: )
Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Macromedia Flash Player | >=11.0<11.2.202.346 | |
| Linux Kernel | ||
| Macromedia Flash Player | >=11.0<11.7.700.272 | |
| Macromedia Flash Player | >=11.8<12.0.0.77 | |
| Apple iOS and macOS | ||
| Microsoft Windows Operating System | ||
| All of | ||
| Macromedia Flash Player | >=11.0<11.2.202.346 | |
| Linux Kernel | ||
| All of | ||
| Any of | ||
| Macromedia Flash Player | >=11.0<11.7.700.272 | |
| Macromedia Flash Player | >=11.8<12.0.0.77 | |
| Any of | ||
| Apple iOS and macOS | ||
| Microsoft Windows Operating System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://helpx.adobe.com/security/products/flash-player/apsb14-08.html
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00014.html
- http://rhn.redhat.com/errata/RHSA-2014-0289.html
- http://security.gentoo.org/glsa/glsa-201405-04.xml
Frequently Asked Questions
What is the severity of CVE-2014-0503?
The severity of CVE-2014-0503 is considered critical as it allows attackers to bypass the Same Origin Policy.
How do I fix CVE-2014-0503?
To fix CVE-2014-0503, update Adobe Flash Player to version 12.0.0.77 or later on affected platforms.
Which versions of Adobe Flash Player are affected by CVE-2014-0503?
Adobe Flash Player versions prior to 11.7.700.272, versions 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and versions before 11.2.202.346 on Linux are affected.
What platforms are impacted by CVE-2014-0503?
CVE-2014-0503 impacts Windows, macOS, and Linux platforms running the affected versions of Adobe Flash Player.
Can CVE-2014-0503 be exploited remotely?
Yes, CVE-2014-0503 can be exploited remotely, allowing attackers to manipulate the Same Origin Policy.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/adobe
- canonical/macromedia flash player
- version/macromedia flash player/11.0
- vendor/linux
- canonical/linux kernel
- version/macromedia flash player/11.8
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows operating system