Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:flash_player:13.0.0.206:*:*:*:*:*:*:*

part: a version: 13.0.0.206 update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductFlash Player (0bb173a9-e280-57e2-8906-f4e606cfd426)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5333 vulnerable 2026-06-08 05:05:47.564292 Details available
Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API, in conjunction with a manipulation involving a '$' (dollar sign) or '(' (open parenthesis) character. NOTE: this issue exists because of an incomplete fix for CVE-2014-4671.
Published: 2014-08-19T10:00:00.000Z
Updated: 2024-08-06T11:41:48.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4671 vulnerable 2026-06-08 05:05:45.406473 Details available
Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API.
Published: 2014-07-09T01:00:00.000Z
Updated: 2024-08-06T11:27:36.060Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0559 vulnerable 2026-06-08 05:05:13.586119 Details available
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556.
Published: 2014-09-10T01:00:00.000Z
Updated: 2024-08-06T09:20:19.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0558 vulnerable 2026-06-08 05:05:13.550831 Details available
Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0564.
Published: 2014-10-15T10:00:00.000Z
Updated: 2024-08-06T09:20:19.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0557 vulnerable 2026-06-08 05:05:13.549727 Details available
Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.
Published: 2014-09-10T01:00:00.000Z
Updated: 2024-08-06T09:20:19.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0556 vulnerable 2026-06-08 05:05:13.547716 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0555 vulnerable 2026-06-08 05:05:13.546733 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0554 vulnerable 2026-06-08 05:05:13.544516 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0553 vulnerable 2026-06-08 05:05:13.542731 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0552 vulnerable 2026-06-08 05:05:13.516356 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0551 vulnerable 2026-06-08 05:05:13.514285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0550 vulnerable 2026-06-08 05:05:13.513260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0549 vulnerable 2026-06-08 05:05:13.511041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0548 vulnerable 2026-06-08 05:05:13.509460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0547 vulnerable 2026-06-08 05:05:13.497578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0545 vulnerable 2026-06-08 05:05:13.464831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0544 vulnerable 2026-06-08 05:05:13.463494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0543 vulnerable 2026-06-08 05:05:13.461956 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0542 vulnerable 2026-06-08 05:05:13.460626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0541 vulnerable 2026-06-08 05:05:13.459215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0540 vulnerable 2026-06-08 05:05:13.457882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0539 vulnerable 2026-06-08 05:05:13.457001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0538 vulnerable 2026-06-08 05:05:13.453806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0537 vulnerable 2026-06-08 05:05:13.439291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0536 vulnerable 2026-06-08 05:05:13.420942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0535 vulnerable 2026-06-08 05:05:13.419747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0534 vulnerable 2026-06-08 05:05:13.417944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0533 vulnerable 2026-06-08 05:05:13.416678 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0532 vulnerable 2026-06-08 05:05:13.415533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0531 vulnerable 2026-06-08 05:05:13.409209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.