CVE-2014-0504: Infoleak
First published: Wed Mar 12 2014(Updated: )
Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows attackers to read the clipboard via unspecified vectors.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Macromedia Flash Player | >=11.0<11.2.202.346 | |
| Linux Kernel | ||
| Macromedia Flash Player | >=11.0<11.7.700.272 | |
| Macromedia Flash Player | >=11.8<12.0.0.77 | |
| Apple iOS and macOS | ||
| Microsoft Windows Operating System | ||
| All of | ||
| Macromedia Flash Player | >=11.0<11.2.202.346 | |
| Linux Kernel | ||
| All of | ||
| Any of | ||
| Macromedia Flash Player | >=11.0<11.7.700.272 | |
| Macromedia Flash Player | >=11.8<12.0.0.77 | |
| Any of | ||
| Apple iOS and macOS | ||
| Microsoft Windows Operating System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://helpx.adobe.com/security/products/flash-player/apsb14-08.html
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00014.html
- http://rhn.redhat.com/errata/RHSA-2014-0289.html
- http://security.gentoo.org/glsa/glsa-201405-04.xml
Frequently Asked Questions
What is the severity of CVE-2014-0504?
CVE-2014-0504 is considered to have a moderate severity level due to its potential exploitation allowing unauthorized clipboard access.
How do I fix CVE-2014-0504?
To remediate CVE-2014-0504, update Adobe Flash Player to version 11.7.700.272 or later, or 12.0.0.77 or later.
What versions of Adobe Flash Player are affected by CVE-2014-0504?
CVE-2014-0504 affects Adobe Flash Player versions prior to 11.7.700.272 on Windows and OS X, and earlier than 11.2.202.346 on Linux.
What type of vulnerability is CVE-2014-0504?
CVE-2014-0504 is a vulnerability that allows attackers to read the clipboard content via unspecified vectors.
Does CVE-2014-0504 affect macOS systems?
Yes, CVE-2014-0504 affects versions of Adobe Flash Player installed on macOS before version 12.0.0.77.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/adobe
- canonical/macromedia flash player
- version/macromedia flash player/11.0
- vendor/linux
- canonical/linux kernel
- version/macromedia flash player/11.8
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows operating system