| Package | Affected versions | Patched versions |
|---|---|---|
| adobe air | = 13.0.0.83≤ 13.0.0.111 | |
| adobe air sdk | = 13.0.0.83≤ 13.0.0.111 | |
| flash player | = 11.2.202.223= 11.2.202.228= 11.2.202.233= 11.2.202.235= 11.2.202.236= 11.2.202.238= 11.2.202.243= 11.2.202.251= 11.2.202.258= 11.2.202.261= 11.2.202.262= 11.2.202.270= 11.2.202.273= 11.2.202.275= 11.2.202.280= 11.2.202.285= 11.2.202.291= 11.2.202.297= 11.2.202.310= 11.2.202.332= 11.2.202.335= 11.2.202.336= 11.2.202.341= 11.2.202.346= 11.2.202.350= 11.2.202.356= 13.0.0.182= 13.0.0.201= 13.0.0.206≤ 11.2.202.359≤ 13.0.0.214 |
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0531 and CVE-2014-0533.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free