NetSight
IP …
medium4.3

CVE-2014-0533

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linu…

Impact

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0532.

Affected products

VendorProductAffected versions
AdobeFlash Player
through 13.0.0.214
through 11.2.202.359
Versions 13.0.0.182, 13.0.0.201, 13.0.0.206, 11.2.202.223
AdobeAdobe Air Sdk
through 13.0.0.111
Version 13.0.0.83
AdobeAdobe Air
through 13.0.0.111
Version 13.0.0.83

Weakness classification

CWE-79

References