CVE-2014-0520: High severity Adobe Flash Player vulnerability
Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0519.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0520?
CVE-2014-0520 is rated as critical due to the potential for attackers to bypass access controls.
How do I fix CVE-2014-0520?
To fix CVE-2014-0520, update Adobe Flash Player to version 13.0.0.214 or later on Windows and OS X, and to version 11.2.202.359 or later on Linux.
Which versions of Adobe Flash Player are affected by CVE-2014-0520?
Adobe Flash Player versions before 13.0.0.214 on Windows and OS X, and before 11.2.202.359 on Linux are affected by CVE-2014-0520.
Is Adobe AIR affected by CVE-2014-0520?
Yes, Adobe AIR SDK versions before 13.0.0.111 are affected by CVE-2014-0520.
What platforms are impacted by CVE-2014-0520?
CVE-2014-0520 impacts Adobe Flash Player on Windows, OS X, and Linux, as well as Adobe AIR SDK.