Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:flash_player:11.2.202.310:*:*:*:*:*:*:*

part: a version: 11.2.202.310 update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductFlash Player (0bb173a9-e280-57e2-8906-f4e606cfd426)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5333 vulnerable 2026-06-08 05:05:47.568065 Details available
Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API, in conjunction with a manipulation involving a '$' (dollar sign) or '(' (open parenthesis) character. NOTE: this issue exists because of an incomplete fix for CVE-2014-4671.
Published: 2014-08-19T10:00:00.000Z
Updated: 2024-08-06T11:41:48.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4671 vulnerable 2026-06-08 05:05:45.397071 Details available
Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API.
Published: 2014-07-09T01:00:00.000Z
Updated: 2024-08-06T11:27:36.060Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0559 vulnerable 2026-06-08 05:05:13.586655 Details available
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556.
Published: 2014-09-10T01:00:00.000Z
Updated: 2024-08-06T09:20:19.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0558 vulnerable 2026-06-08 05:05:13.579844 Details available
Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0564.
Published: 2014-10-15T10:00:00.000Z
Updated: 2024-08-06T09:20:19.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0557 vulnerable 2026-06-08 05:05:13.549508 Details available
Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.
Published: 2014-09-10T01:00:00.000Z
Updated: 2024-08-06T09:20:19.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0556 vulnerable 2026-06-08 05:05:13.548254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0555 vulnerable 2026-06-08 05:05:13.546421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0554 vulnerable 2026-06-08 05:05:13.544973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0553 vulnerable 2026-06-08 05:05:13.543315 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0552 vulnerable 2026-06-08 05:05:13.516129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0551 vulnerable 2026-06-08 05:05:13.514807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0550 vulnerable 2026-06-08 05:05:13.512958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0549 vulnerable 2026-06-08 05:05:13.511577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0548 vulnerable 2026-06-08 05:05:13.509930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0547 vulnerable 2026-06-08 05:05:13.501727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0545 vulnerable 2026-06-08 05:05:13.465405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0544 vulnerable 2026-06-08 05:05:13.463975 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0543 vulnerable 2026-06-08 05:05:13.462472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0542 vulnerable 2026-06-08 05:05:13.461147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0541 vulnerable 2026-06-08 05:05:13.459693 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0540 vulnerable 2026-06-08 05:05:13.458384 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0539 vulnerable 2026-06-08 05:05:13.456800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0538 vulnerable 2026-06-08 05:05:13.446953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0537 vulnerable 2026-06-08 05:05:13.442500 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0536 not_vulnerable 2026-06-08 05:05:13.420770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0535 vulnerable 2026-06-08 05:05:13.419457 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0534 vulnerable 2026-06-08 05:05:13.418350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0533 vulnerable 2026-06-08 05:05:13.417041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0532 vulnerable 2026-06-08 05:05:13.415882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0531 vulnerable 2026-06-08 05:05:13.410712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0509 vulnerable 2026-06-08 05:05:13.287881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0508 vulnerable 2026-06-08 05:05:13.283577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0507 vulnerable 2026-06-08 05:05:13.234352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.