CVE-2014-0503

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:P/A:N

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://helpx.adobe.com/security/products/flash-player/apsb14-08.htmlVendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00013.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00014.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0289.htmlThird Party Advisory
http://security.gentoo.org/glsa/glsa-201405-04.xmlThird Party Advisory
http://helpx.adobe.com/security/products/flash-player/apsb14-08.htmlVendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00013.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00014.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0289.htmlThird Party Advisory
http://security.gentoo.org/glsa/glsa-201405-04.xmlThird Party Advisory

Timeline

Published: Mar 12, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-05045.0Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, all CVE-2014-050510.0Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) CVE-2014-050610.0Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and b CVE-2014-05079.3Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.20 CVE-2014-05085.0Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Ado CVE-2014-05094.3Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows an CVE-2014-051010.0Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection CVE-2014-051110.0Heap-based buffer overflow in Adobe Reader 11.0.06 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrate CVE-2014-051210.0Adobe Reader 11.0.06 allows attackers to bypass a PDF sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during CVE-2014-051310.0Stack-based buffer overflow in Adobe Illustrator CS6 before 16.0.5 and 16.2.x before 16.2.2 allows remote attackers to execute arbitrary cod CVE-2014-05149.3The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to e CVE-2014-051510.0Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.2