CVE-2014-0519

High

Description

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0520.

SeverityHigh
CVSS7.5
Exploit probability—
ProductAdobe Flash Player
PublishedMay 14, 2014
First seenMay 14, 2014

How to fix

Update
  • adobe flash_player13.0.0.214, 11.2.202.359 or later
  • adobe adobe_air13.0.0.111 or later

Affected products

ProductAffected versionsFixed in
adobe flash_player13.0 ≤ v < 13.0.0.214, 11.0 ≤ v < 11.2.202.35913.0.0.214, 11.2.202.359
adobe adobe_airv < 13.0.0.11113.0.0.111

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.