Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:flash_player:11.2.202.280:*:*:*:*:*:*:*

part: a version: 11.2.202.280 update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductFlash Player (0bb173a9-e280-57e2-8906-f4e606cfd426)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5333 vulnerable 2026-06-08 05:05:47.567996 Details available
Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API, in conjunction with a manipulation involving a '$' (dollar sign) or '(' (open parenthesis) character. NOTE: this issue exists because of an incomplete fix for CVE-2014-4671.
Published: 2014-08-19T10:00:00.000Z
Updated: 2024-08-06T11:41:48.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4671 vulnerable 2026-06-08 05:05:45.394894 Details available
Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API.
Published: 2014-07-09T01:00:00.000Z
Updated: 2024-08-06T11:27:36.060Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0559 vulnerable 2026-06-08 05:05:13.586591 Details available
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556.
Published: 2014-09-10T01:00:00.000Z
Updated: 2024-08-06T09:20:19.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0558 vulnerable 2026-06-08 05:05:13.579778 Details available
Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0564.
Published: 2014-10-15T10:00:00.000Z
Updated: 2024-08-06T09:20:19.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0557 vulnerable 2026-06-08 05:05:13.549444 Details available
Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.
Published: 2014-09-10T01:00:00.000Z
Updated: 2024-08-06T09:20:19.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0556 vulnerable 2026-06-08 05:05:13.548191 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0555 vulnerable 2026-06-08 05:05:13.546361 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0554 vulnerable 2026-06-08 05:05:13.544912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0553 vulnerable 2026-06-08 05:05:13.543249 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0552 vulnerable 2026-06-08 05:05:13.516010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0551 vulnerable 2026-06-08 05:05:13.514743 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0550 vulnerable 2026-06-08 05:05:13.512896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0549 vulnerable 2026-06-08 05:05:13.511513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0548 vulnerable 2026-06-08 05:05:13.509867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0547 vulnerable 2026-06-08 05:05:13.501663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0545 vulnerable 2026-06-08 05:05:13.465341 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0544 vulnerable 2026-06-08 05:05:13.463912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0543 vulnerable 2026-06-08 05:05:13.462410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0542 vulnerable 2026-06-08 05:05:13.461084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0541 vulnerable 2026-06-08 05:05:13.459629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0540 vulnerable 2026-06-08 05:05:13.458312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0539 vulnerable 2026-06-08 05:05:13.456736 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0538 vulnerable 2026-06-08 05:05:13.446891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0537 vulnerable 2026-06-08 05:05:13.442435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0536 not_vulnerable 2026-06-08 05:05:13.420706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0535 vulnerable 2026-06-08 05:05:13.419394 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0534 vulnerable 2026-06-08 05:05:13.418287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0533 vulnerable 2026-06-08 05:05:13.416977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0532 vulnerable 2026-06-08 05:05:13.415816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0531 vulnerable 2026-06-08 05:05:13.410644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0509 vulnerable 2026-06-08 05:05:13.286201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0508 vulnerable 2026-06-08 05:05:13.283511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0507 vulnerable 2026-06-08 05:05:13.212057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3347 vulnerable 2026-06-08 05:04:31.076223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3345 vulnerable 2026-06-08 05:04:31.072520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3344 vulnerable 2026-06-08 05:04:31.041195 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.