IT

Tracker / CVE-2014-0531

CVE-2014-0531

Medium 4.3

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-0532 and CVE-2014-0533.

Affected products and versions

adobe adobe_air
adobe adobe_air · … → 13.0.0.111
adobe adobe_air_sdk
adobe adobe_air_sdk · … → 13.0.0.111
adobe flash_player
adobe flash_player · … → 11.2.202.359
adobe flash_player · … → 13.0.0.214

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References