Vulnerability in Adobe Air

CVE-2014-0491

Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to bypass unspecified protection mechanisms via unknown vectors.

EPSS: 0.071 (93.6th percentile) — read the EPSS interpretation.

Affected products

Adobe Adobe_air
Adobe Adobe_air_sdk
Adobe Flash_player
Apple Mac_os_x
Linux Linux_kernel
Microsoft Windows
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@adobe.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
psirt@adobe.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
psirt@adobe.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
psirt@adobe.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
psirt@adobe.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)