Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:adobe_air:13.0.0.111:*:*:*:*:*:*:*

part: a version: 13.0.0.111 update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductAdobe Air (fa4bebd7-8191-555e-9017-60a0069ca857)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5333 vulnerable 2026-06-08 05:05:47.562097 Details available
Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API, in conjunction with a manipulation involving a '$' (dollar sign) or '(' (open parenthesis) character. NOTE: this issue exists because of an incomplete fix for CVE-2014-4671.
Published: 2014-08-19T10:00:00.000Z
Updated: 2024-08-06T11:41:48.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4671 vulnerable 2026-06-08 05:05:45.403290 Details available
Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API.
Published: 2014-07-09T01:00:00.000Z
Updated: 2024-08-06T11:27:36.060Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0559 vulnerable 2026-06-08 05:05:13.585982 Details available
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556.
Published: 2014-09-10T01:00:00.000Z
Updated: 2024-08-06T09:20:19.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0558 vulnerable 2026-06-08 05:05:13.577538 Details available
Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0564.
Published: 2014-10-15T10:00:00.000Z
Updated: 2024-08-06T09:20:19.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0557 vulnerable 2026-06-08 05:05:13.550069 Details available
Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors.
Published: 2014-09-10T01:00:00.000Z
Updated: 2024-08-06T09:20:19.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0556 vulnerable 2026-06-08 05:05:13.548474 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0555 vulnerable 2026-06-08 05:05:13.546037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0554 vulnerable 2026-06-08 05:05:13.544405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0553 vulnerable 2026-06-08 05:05:13.542950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0552 vulnerable 2026-06-08 05:05:13.515694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0551 vulnerable 2026-06-08 05:05:13.514148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0550 vulnerable 2026-06-08 05:05:13.512559 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0549 vulnerable 2026-06-08 05:05:13.510908 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0548 vulnerable 2026-06-08 05:05:13.507095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0547 vulnerable 2026-06-08 05:05:13.505045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0545 vulnerable 2026-06-08 05:05:13.465043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0544 vulnerable 2026-06-08 05:05:13.463642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0543 vulnerable 2026-06-08 05:05:13.462745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0542 vulnerable 2026-06-08 05:05:13.460520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0541 vulnerable 2026-06-08 05:05:13.459359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0540 vulnerable 2026-06-08 05:05:13.457788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0539 vulnerable 2026-06-08 05:05:13.456420 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0538 vulnerable 2026-06-08 05:05:13.450508 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0537 vulnerable 2026-06-08 05:05:13.442161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.