First published: Wed May 14 2014(Updated: )
Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader | >=13.0<13.0.0.214 | |
Apple iOS and macOS | ||
Microsoft Windows | ||
Adobe Acrobat Reader | >=11.0<11.2.202.359 | |
Linux Kernel | ||
Adobe AIR SDK | <13.0.0.111 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-0516 is classified as a critical vulnerability that can lead to unauthorized access and exploitation.
To fix CVE-2014-0516, update Adobe Flash Player to version 13.0.0.214 or later, or Adobe AIR SDK to version 13.0.0.111 or later.
CVE-2014-0516 affects Adobe Flash Player before version 13.0.0.214 and Adobe AIR SDK before version 13.0.0.111.
Yes, CVE-2014-0516 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
CVE-2014-0516 impacts Windows and OS X systems running affected versions of Adobe Flash Player.