CVE-2014-0533: XSS
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0532.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0533?
CVE-2014-0533 is considered a high-severity cross-site scripting vulnerability affecting multiple versions of Adobe Flash Player and Adobe AIR.
How do I fix CVE-2014-0533?
To fix CVE-2014-0533, update Adobe Flash Player to version 13.0.0.223 or later and Adobe AIR to version 14.0.0.110 or later.
Which software is affected by CVE-2014-0533?
CVE-2014-0533 affects Adobe Flash Player versions prior to 13.0.0.223 and 14.x prior to 14.0.0.125 on Windows, OS X, and Linux, along with Adobe AIR versions prior to 14.0.0.110.
Can CVE-2014-0533 be exploited remotely?
Yes, CVE-2014-0533 can be exploited remotely by attackers through maliciously crafted content.
Is there a workaround for CVE-2014-0533?
The best workaround for CVE-2014-0533 is to disable Adobe Flash Player or Adobe AIR until the software is updated to the patched versions.