CVE-2014-0520
First published: Wed May 14 2014(Updated: )
Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0519.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Macromedia Flash Player | >=13.0<13.0.0.214 | |
| Apple iOS and macOS | ||
| Microsoft Windows Operating System | ||
| Macromedia Flash Player | >=11.0<11.2.202.359 | |
| Linux Kernel | ||
| Adobe | <13.0.0.111 | |
| All of | ||
| Macromedia Flash Player | >=13.0<13.0.0.214 | |
| Any of | ||
| Apple iOS and macOS | ||
| Microsoft Windows Operating System | ||
| All of | ||
| Macromedia Flash Player | >=11.0<11.2.202.359 | |
| Linux Kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://helpx.adobe.com/security/products/flash-player/apsb14-14.html
- http://lists.opensuse.org/opensuse-security-announce/2014-05/msg00008.html
- http://lists.opensuse.org/opensuse-updates/2014-05/msg00051.html
- http://rhn.redhat.com/errata/RHSA-2014-0496.html
- http://security.gentoo.org/glsa/glsa-201406-08.xml
Frequently Asked Questions
What is the severity of CVE-2014-0520?
CVE-2014-0520 is rated as critical due to the potential for attackers to bypass access controls.
How do I fix CVE-2014-0520?
To fix CVE-2014-0520, update Adobe Flash Player to version 13.0.0.214 or later on Windows and OS X, and to version 11.2.202.359 or later on Linux.
Which versions of Adobe Flash Player are affected by CVE-2014-0520?
Adobe Flash Player versions before 13.0.0.214 on Windows and OS X, and before 11.2.202.359 on Linux are affected by CVE-2014-0520.
Is Adobe AIR affected by CVE-2014-0520?
Yes, Adobe AIR SDK versions before 13.0.0.111 are affected by CVE-2014-0520.
What platforms are impacted by CVE-2014-0520?
CVE-2014-0520 impacts Adobe Flash Player on Windows, OS X, and Linux, as well as Adobe AIR SDK.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/adobe
- canonical/macromedia flash player
- version/macromedia flash player/13.0
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows operating system
- version/macromedia flash player/11.0
- vendor/linux
- canonical/linux kernel
- canonical/adobe