Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:flash_player:11.2.202.350:*:*:*:*:*:*:*

part: a version: 11.2.202.350 update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductFlash Player (0bb173a9-e280-57e2-8906-f4e606cfd426)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5333 vulnerable 2026-06-08 05:05:47.568177 Details available
Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API, in conjunction with a manipulation involving a '$' (dollar sign) or '(' (open parenthesis) character. NOTE: this issue exists because of an incomplete fix for CVE-2014-4671.
Published: 2014-08-19T10:00:00.000Z
Updated: 2024-08-06T11:41:48.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4671 vulnerable 2026-06-08 05:05:45.400321 Details available
Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API.
Published: 2014-07-09T01:00:00.000Z
Updated: 2024-08-06T11:27:36.060Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0559 vulnerable 2026-06-08 05:05:13.586750 Details available
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556.
Published: 2014-09-10T01:00:00.000Z
Updated: 2024-08-06T09:20:19.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0558 vulnerable 2026-06-08 05:05:13.579944 Details available
Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0564.
Published: 2014-10-15T10:00:00.000Z
Updated: 2024-08-06T09:20:19.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0557 vulnerable 2026-06-08 05:05:13.549602 Details available
Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.
Published: 2014-09-10T01:00:00.000Z
Updated: 2024-08-06T09:20:19.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0556 vulnerable 2026-06-08 05:05:13.548348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0555 vulnerable 2026-06-08 05:05:13.546515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0554 vulnerable 2026-06-08 05:05:13.545127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0553 vulnerable 2026-06-08 05:05:13.543411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0552 vulnerable 2026-06-08 05:05:13.516230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0551 vulnerable 2026-06-08 05:05:13.514903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0550 vulnerable 2026-06-08 05:05:13.513051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0549 vulnerable 2026-06-08 05:05:13.511674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0548 vulnerable 2026-06-08 05:05:13.510025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0547 vulnerable 2026-06-08 05:05:13.501824 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0545 vulnerable 2026-06-08 05:05:13.465498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0544 vulnerable 2026-06-08 05:05:13.464071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0543 vulnerable 2026-06-08 05:05:13.462569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0542 vulnerable 2026-06-08 05:05:13.461248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0541 vulnerable 2026-06-08 05:05:13.459785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0540 vulnerable 2026-06-08 05:05:13.458481 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0539 vulnerable 2026-06-08 05:05:13.456902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0538 vulnerable 2026-06-08 05:05:13.447171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0537 vulnerable 2026-06-08 05:05:13.442597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0536 not_vulnerable 2026-06-08 05:05:13.420861 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0535 vulnerable 2026-06-08 05:05:13.419668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0534 vulnerable 2026-06-08 05:05:13.418444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0533 vulnerable 2026-06-08 05:05:13.417146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0532 vulnerable 2026-06-08 05:05:13.415978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0531 vulnerable 2026-06-08 05:05:13.414142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.