CVE-2014-0533

CWE-79 — Cross-site Scripting (XSS)8 documents6 sources
Severity
4.3MEDIUM
EPSS
1.0%
top 22.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Adobe Adobe AIRAdobe Adobe AIR SDKAdobe Flash Player
Timeline
PublishedJun 11
Latest updateMay 14

Description

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0532.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages4 packages

▶NVDadobe/flash_player13.0.0.214+30
▶NVDadobe/adobe_air13.0.0.111+1
▶NVDadobe/adobe_air_sdk13.0.0.111+1
▶Ubuntuflashplugin-nonfree< 11.2.202.378ubuntu0.14.04.1

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-467c-77hq-3qwx: Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13↗2022-05-14
▶
CVEList
CVE-2014-0533: Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13↗2014-06-11
▶
OSV
CVE-2014-0533: Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13↗2014-06-11
▶

📋Vendor Advisories

3
Red Hat
flash-plugin: multiple cross-site scripting flaws (APSB14-16)↗2014-06-10
▶
Red Hat
flash-plugin: multiple cross-site scripting flaws (APSB14-16)↗2014-06-10
▶
Red Hat
flash-plugin: multiple cross-site scripting flaws (APSB14-16)↗2014-06-10
▶

💬Community

1
Bugzilla
CVE-2014-0531 CVE-2014-0532 CVE-2014-0533 flash-plugin: multiple cross-site scripting flaws (APSB14-16)↗2014-06-10
▶
CVE-2014-0533 (MEDIUM CVSS 4.3) | Cross-site scripting (XSS) vulnerab | cvebase.io