CWE
79
Advisory Published
Updated

CVE-2014-0509: XSS

First published: Tue Apr 08 2014(Updated: )

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Credit: psirt@adobe.com

Affected SoftwareAffected VersionHow to fix
Macromedia Flash Player=11.0
Macromedia Flash Player=11.0.1.152
Macromedia Flash Player=11.0.1.153
Macromedia Flash Player=11.1
Macromedia Flash Player=11.1.102.55
Macromedia Flash Player=11.1.102.59
Macromedia Flash Player=11.1.102.62
Macromedia Flash Player=11.1.102.63
Macromedia Flash Player=11.1.111.8
Macromedia Flash Player=11.1.111.44
Macromedia Flash Player=11.1.111.50
Macromedia Flash Player=11.1.111.54
Macromedia Flash Player=11.1.115.7
Macromedia Flash Player=11.1.115.34
Macromedia Flash Player=11.1.115.48
Macromedia Flash Player=11.1.115.54
Macromedia Flash Player=11.1.115.58
Macromedia Flash Player=11.2.202.223
Macromedia Flash Player=11.2.202.228
Macromedia Flash Player=11.2.202.233
Macromedia Flash Player=11.2.202.235
Macromedia Flash Player=11.2.202.236
Macromedia Flash Player=11.2.202.238
Macromedia Flash Player=11.2.202.243
Macromedia Flash Player=11.2.202.251
Macromedia Flash Player=11.2.202.258
Macromedia Flash Player=11.2.202.261
Macromedia Flash Player=11.2.202.262
Macromedia Flash Player=11.2.202.270
Macromedia Flash Player=11.2.202.273
Macromedia Flash Player=11.2.202.275
Macromedia Flash Player=11.2.202.280
Macromedia Flash Player=11.2.202.285
Macromedia Flash Player=11.3.300.257
Macromedia Flash Player=11.3.300.262
Macromedia Flash Player=11.3.300.265
Macromedia Flash Player=11.3.300.268
Macromedia Flash Player=11.3.300.270
Macromedia Flash Player=11.3.300.271
Macromedia Flash Player=11.3.300.273
Macromedia Flash Player=11.4.402.265
Macromedia Flash Player=11.4.402.278
Macromedia Flash Player=11.4.402.287
Macromedia Flash Player=11.5.502.110
Macromedia Flash Player=11.5.502.135
Macromedia Flash Player=11.5.502.136
Macromedia Flash Player=11.5.502.146
Macromedia Flash Player=11.5.502.149
Macromedia Flash Player=11.6.602.167
Macromedia Flash Player=11.6.602.168
Macromedia Flash Player=11.6.602.171
Macromedia Flash Player=11.6.602.180
Macromedia Flash Player=11.7.700.169
Macromedia Flash Player=11.7.700.202
Macromedia Flash Player=11.7.700.224
Macromedia Flash Player=11.7.700.232
Macromedia Flash Player=11.7.700.242
Macromedia Flash Player=11.7.700.252
Macromedia Flash Player=11.7.700.257
Macromedia Flash Player=11.7.700.260
Macromedia Flash Player=11.8.800.94
Macromedia Flash Player=11.8.800.97
Macromedia Flash Player=11.8.800.168
Macromedia Flash Player=11.9.900.117
Macromedia Flash Player=11.9.900.152
Macromedia Flash Player=11.9.900.170
Macromedia Flash Player=12.0.0.38
Macromedia Flash Player=12.0.0.41
Macromedia Flash Player=12.0.0.43
Apple iOS and macOS
Microsoft Windows Operating System
Adobe<=4.0.0.1390
Adobe=1.0
Adobe=1.0.1
Adobe=1.0.8.4990
Adobe=1.0.4990
Adobe=1.1
Adobe=1.1.0.5790
Adobe=1.5
Adobe=1.5.0.7220
Adobe=1.5.1
Adobe=1.5.1.8210
Adobe=1.5.2
Adobe=1.5.3
Adobe=1.5.3.9120
Adobe=1.5.3.9130
Adobe=2.0.2
Adobe=2.0.2.12610
Adobe=2.0.3
Adobe=2.0.3.13070
Adobe=2.0.4
Adobe=2.5.0.16600
Adobe=2.5.1.17730
Adobe=2.6
Adobe=2.6.0.19120
Adobe=2.6.0.19140
Adobe=2.7
Adobe=2.7.0.1948
Adobe=2.7.0.1953
Adobe=2.7.0.19480
Adobe=2.7.0.19530
Adobe=2.7.1
Adobe=2.7.1.19610
Adobe=3.0.0.408
Adobe=3.0.0.4080
Adobe=3.1.0.485
Adobe=3.1.0.488
Adobe=3.1.0.4880
Adobe=3.2.0.207
Adobe=3.2.0.2070
Adobe=3.3.0.3670
Adobe=3.4.0.2540
Adobe=3.4.0.2710
Adobe=3.5.0.600
Adobe=3.5.0.880
Adobe=3.5.0.890
Adobe=3.5.0.1060
Adobe=3.6.0.597
Adobe=3.6.0.6090
Adobe=3.7.0.1530
Adobe=3.7.0.1860
Adobe=3.7.0.2090
Adobe=3.8.0.870
Adobe=3.8.0.910
Adobe=3.9.0.1030
Adobe=3.9.0.1060
Adobe=3.9.0.1210
Adobe=3.9.0.1380
Macromedia Flash Player<=11.2.202.346
Macromedia Flash Player=11.2.202.291
Macromedia Flash Player=11.2.202.297
Macromedia Flash Player=11.2.202.310
Macromedia Flash Player=11.2.202.327
Macromedia Flash Player=11.2.202.332
Macromedia Flash Player=11.2.202.335
Macromedia Flash Player=11.2.202.336
Macromedia Flash Player=11.2.202.341
Linux Kernel
Adobe AIR SDK<=4.0.0.1628
Adobe AIR SDK=3.0.0.4080
Adobe AIR SDK=3.1.0.488
Adobe AIR SDK=3.2.0.2070
Adobe AIR SDK=3.3.0.3650
Adobe AIR SDK=3.3.0.3690
Adobe AIR SDK=3.4.0.2540
Adobe AIR SDK=3.4.0.2710
Adobe AIR SDK=3.5.0.600
Adobe AIR SDK=3.5.0.880
Adobe AIR SDK=3.5.0.890
Adobe AIR SDK=3.5.0.1060
Adobe AIR SDK=3.6.0.599
Adobe AIR SDK=3.6.0.6090
Adobe AIR SDK=3.7.0.1530
Adobe AIR SDK=3.7.0.1860
Adobe AIR SDK=3.7.0.2090
Adobe AIR SDK=3.8.0.870
Adobe AIR SDK=3.8.0.910
Adobe AIR SDK=3.8.0.1430
Adobe AIR SDK=3.9.0.1030
Adobe AIR SDK=3.9.0.1210
Adobe AIR SDK=3.9.0.1380
Adobe AIR SDK=4.0.0.1390
All of
Any of
Macromedia Flash Player=11.0
Macromedia Flash Player=11.0.1.152
Macromedia Flash Player=11.0.1.153
Macromedia Flash Player=11.1
Macromedia Flash Player=11.1.102.55
Macromedia Flash Player=11.1.102.59
Macromedia Flash Player=11.1.102.62
Macromedia Flash Player=11.1.102.63
Macromedia Flash Player=11.1.111.8
Macromedia Flash Player=11.1.111.44
Macromedia Flash Player=11.1.111.50
Macromedia Flash Player=11.1.111.54
Macromedia Flash Player=11.1.115.7
Macromedia Flash Player=11.1.115.34
Macromedia Flash Player=11.1.115.48
Macromedia Flash Player=11.1.115.54
Macromedia Flash Player=11.1.115.58
Macromedia Flash Player=11.2.202.223
Macromedia Flash Player=11.2.202.228
Macromedia Flash Player=11.2.202.233
Macromedia Flash Player=11.2.202.235
Macromedia Flash Player=11.2.202.236
Macromedia Flash Player=11.2.202.238
Macromedia Flash Player=11.2.202.243
Macromedia Flash Player=11.2.202.251
Macromedia Flash Player=11.2.202.258
Macromedia Flash Player=11.2.202.261
Macromedia Flash Player=11.2.202.262
Macromedia Flash Player=11.2.202.270
Macromedia Flash Player=11.2.202.273
Macromedia Flash Player=11.2.202.275
Macromedia Flash Player=11.2.202.280
Macromedia Flash Player=11.2.202.285
Macromedia Flash Player=11.3.300.257
Macromedia Flash Player=11.3.300.262
Macromedia Flash Player=11.3.300.265
Macromedia Flash Player=11.3.300.268
Macromedia Flash Player=11.3.300.270
Macromedia Flash Player=11.3.300.271
Macromedia Flash Player=11.3.300.273
Macromedia Flash Player=11.4.402.265
Macromedia Flash Player=11.4.402.278
Macromedia Flash Player=11.4.402.287
Macromedia Flash Player=11.5.502.110
Macromedia Flash Player=11.5.502.135
Macromedia Flash Player=11.5.502.136
Macromedia Flash Player=11.5.502.146
Macromedia Flash Player=11.5.502.149
Macromedia Flash Player=11.6.602.167
Macromedia Flash Player=11.6.602.168
Macromedia Flash Player=11.6.602.171
Macromedia Flash Player=11.6.602.180
Macromedia Flash Player=11.7.700.169
Macromedia Flash Player=11.7.700.202
Macromedia Flash Player=11.7.700.224
Macromedia Flash Player=11.7.700.232
Macromedia Flash Player=11.7.700.242
Macromedia Flash Player=11.7.700.252
Macromedia Flash Player=11.7.700.257
Macromedia Flash Player=11.7.700.260
Macromedia Flash Player=11.8.800.94
Macromedia Flash Player=11.8.800.97
Macromedia Flash Player=11.8.800.168
Macromedia Flash Player=11.9.900.117
Macromedia Flash Player=11.9.900.152
Macromedia Flash Player=11.9.900.170
Macromedia Flash Player=12.0.0.38
Macromedia Flash Player=12.0.0.41
Macromedia Flash Player=12.0.0.43
Any of
Apple iOS and macOS
Microsoft Windows Operating System
All of
Any of
Macromedia Flash Player<=11.2.202.346
Macromedia Flash Player=11.0
Macromedia Flash Player=11.0.1.152
Macromedia Flash Player=11.0.1.153
Macromedia Flash Player=11.1
Macromedia Flash Player=11.1.102.55
Macromedia Flash Player=11.1.102.59
Macromedia Flash Player=11.1.102.62
Macromedia Flash Player=11.1.102.63
Macromedia Flash Player=11.1.111.8
Macromedia Flash Player=11.1.111.44
Macromedia Flash Player=11.1.111.50
Macromedia Flash Player=11.1.111.54
Macromedia Flash Player=11.1.115.7
Macromedia Flash Player=11.1.115.34
Macromedia Flash Player=11.1.115.48
Macromedia Flash Player=11.1.115.54
Macromedia Flash Player=11.1.115.58
Macromedia Flash Player=11.2.202.223
Macromedia Flash Player=11.2.202.228
Macromedia Flash Player=11.2.202.233
Macromedia Flash Player=11.2.202.235
Macromedia Flash Player=11.2.202.236
Macromedia Flash Player=11.2.202.238
Macromedia Flash Player=11.2.202.243
Macromedia Flash Player=11.2.202.251
Macromedia Flash Player=11.2.202.258
Macromedia Flash Player=11.2.202.261
Macromedia Flash Player=11.2.202.262
Macromedia Flash Player=11.2.202.270
Macromedia Flash Player=11.2.202.273
Macromedia Flash Player=11.2.202.275
Macromedia Flash Player=11.2.202.280
Macromedia Flash Player=11.2.202.285
Macromedia Flash Player=11.2.202.291
Macromedia Flash Player=11.2.202.297
Macromedia Flash Player=11.2.202.310
Macromedia Flash Player=11.2.202.327
Macromedia Flash Player=11.2.202.332
Macromedia Flash Player=11.2.202.335
Macromedia Flash Player=11.2.202.336
Macromedia Flash Player=11.2.202.341
Linux Kernel

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2014-0509?

    CVE-2014-0509 has been rated as a critical vulnerability due to its impact on user security and the widespread use of Adobe Flash Player.

  • How do I fix CVE-2014-0509?

    To mitigate CVE-2014-0509, update Adobe Flash Player to version 11.7.700.275 or later for Windows, OS X, or 11.2.202.350 or later for Linux.

  • Which versions of Adobe Flash Player are affected by CVE-2014-0509?

    CVE-2014-0509 affects Adobe Flash Player versions prior to 11.7.700.275 on Windows and OS X, and versions earlier than 11.2.202.350 on Linux.

  • Does CVE-2014-0509 affect Adobe AIR?

    Yes, CVE-2014-0509 affects Adobe AIR SDK versions before 13.0.0.83 on Android and prior versions of Adobe AIR.

  • Can CVE-2014-0509 be exploited remotely?

    Yes, CVE-2014-0509 can be exploited remotely to execute arbitrary code through specially crafted web content.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203