HIGH · 7.5

CVE-2014-0537

Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe...

Vulnerability Description

Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0539.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
AdobeAdobe Air Sdk<= 14.0.0.110
AdobeFlash Player<= 13.0.0.223
AppleMac Os XAll versions
MicrosoftWindowsAll versions
AdobeAdobe Air<= 14.0.0.110
LinuxLinux KernelAll versions

Related Weaknesses (CWE)

References

FAQ

What is CVE-2014-0537?

CVE-2014-0537 is a vulnerability with a CVSS score of 7.5 (HIGH). Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe...

How severe is CVE-2014-0537?

CVE-2014-0537 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-0537?

Check the references section above for vendor advisories and patch information. Affected products include: Adobe Adobe Air Sdk, Adobe Flash Player, Apple Mac Os X, Microsoft Windows, Adobe Adobe Air.