{"api_version":"1","generated_at":"2026-07-23T09:57:06+00:00","cve":"CVE-2014-5333","urls":{"html":"https://cve.report/CVE-2014-5333","api":"https://cve.report/api/cve/CVE-2014-5333.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-5333","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-5333"},"summary":{"title":"CVE-2014-5333","description":"Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API, in conjunction with a manipulation involving a '$' (dollar sign) or '(' (open parenthesis) character. NOTE: this issue exists because of an incomplete fix for CVE-2014-4671.","state":"PUBLISHED","assigner":"adobe","published_at":"2014-08-19 11:16:59","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-352","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95418","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95418","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://miki.it/blog/2014/8/15/adobe-really-fixed-rosetta-flash-today/","name":"http://miki.it/blog/2014/8/15/adobe-really-fixed-rosetta-flash-today/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Adobe fixed Rosetta Flash today","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://helpx.adobe.com/security/products/flash-player/apsb14-18.html","name":"http://helpx.adobe.com/security/products/flash-player/apsb14-18.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Adobe Security Bulletin","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-5333","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-5333","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"adobe_air","cpe6":"13.0.0.111","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"adobe_air","cpe6":"13.0.0.83","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"adobe_air","cpe6":"14.0.0.110","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"14.0.0.110","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"adobe_air","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"14.0.0.137","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"adobe_air","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"adobe_air_sdk","cpe6":"13.0.0.111","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"adobe_air_sdk","cpe6":"13.0.0.83","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"adobe_air_sdk","cpe6":"14.0.0.110","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"14.0.0.137","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"adobe_air_sdk","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.223","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.228","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.233","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.235","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.236","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.238","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.243","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.251","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.258","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.261","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.262","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.270","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.273","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.275","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.280","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.285","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.291","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.297","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.310","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.332","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.335","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.336","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.341","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.346","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.350","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.356","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.359","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"11.2.202.378","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"13.0.0.182","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"13.0.0.201","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"13.0.0.206","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"13.0.0.214","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"13.0.0.223","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"14.0.0.125","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"14.0.0.145","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"11.2.202.394","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"1","versionEndIncluding":"13.0.0.231","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adobe","cpe5":"flash_player","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"google","cpe5":"android","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"5333","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"microsoft","cpe5":"windows","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T11:41:48.692Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://helpx.adobe.com/security/products/flash-player/apsb14-18.html"},{"name":"adobe-cve20145333-csrf(95418)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95418"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://miki.it/blog/2014/8/15/adobe-really-fixed-rosetta-flash-today/"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-08-15T00:00:00.000Z","descriptions":[{"lang":"en","value":"Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API, in conjunction with a manipulation involving a '$' (dollar sign) or '(' (open parenthesis) character. NOTE: this issue exists because of an incomplete fix for CVE-2014-4671."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-07T15:57:01.000Z","orgId":"078d4453-3bcd-4900-85e6-15281da43538","shortName":"adobe"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://helpx.adobe.com/security/products/flash-player/apsb14-18.html"},{"name":"adobe-cve20145333-csrf(95418)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95418"},{"tags":["x_refsource_MISC"],"url":"http://miki.it/blog/2014/8/15/adobe-really-fixed-rosetta-flash-today/"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@adobe.com","ID":"CVE-2014-5333","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API, in conjunction with a manipulation involving a '$' (dollar sign) or '(' (open parenthesis) character. NOTE: this issue exists because of an incomplete fix for CVE-2014-4671."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://helpx.adobe.com/security/products/flash-player/apsb14-18.html","refsource":"CONFIRM","url":"http://helpx.adobe.com/security/products/flash-player/apsb14-18.html"},{"name":"adobe-cve20145333-csrf(95418)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95418"},{"name":"http://miki.it/blog/2014/8/15/adobe-really-fixed-rosetta-flash-today/","refsource":"MISC","url":"http://miki.it/blog/2014/8/15/adobe-really-fixed-rosetta-flash-today/"}]}}}},"cveMetadata":{"assignerOrgId":"078d4453-3bcd-4900-85e6-15281da43538","assignerShortName":"adobe","cveId":"CVE-2014-5333","datePublished":"2014-08-19T10:00:00.000Z","dateReserved":"2014-08-18T00:00:00.000Z","dateUpdated":"2024-08-06T11:41:48.692Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-08-19 11:16:59","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-352","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*","versionEndIncluding":"14.0.0.137","matchCriteriaId":"83D55436-5B93-4285-865A-7CDEBAB23CEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:13.0.0.83:*:*:*:*:*:*:*","matchCriteriaId":"3C898203-9D6E-4430-8905-C28180F954E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:13.0.0.111:*:*:*:*:*:*:*","matchCriteriaId":"434B6846-3ED5-4F23-88D1-567668EE8E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:14.0.0.110:*:*:*:*:*:*:*","matchCriteriaId":"CB252359-318A-4054-8CEA-D08AB7500100"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","matchCriteriaId":"8255F035-04C8-4158-B301-82101711939C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"13.0.0.231","matchCriteriaId":"DFE450E1-FE4E-4BDD-BD7D-5844AFC0C676"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:13.0.0.182:*:*:*:*:*:*:*","matchCriteriaId":"C3DD6547-ABEE-4734-87AA-BD3E247226B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:13.0.0.201:*:*:*:*:*:*:*","matchCriteriaId":"0732FFB7-4BFD-499D-A166-9128F3DABA0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:13.0.0.206:*:*:*:*:*:*:*","matchCriteriaId":"C282F91D-C1FE-4CC7-A33D-8E43F85DF168"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:13.0.0.214:*:*:*:*:*:*:*","matchCriteriaId":"11E8C1F3-83AA-468B-8F5A-285F3BD19CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:13.0.0.223:*:*:*:*:*:*:*","matchCriteriaId":"59F08016-055D-4B70-8085-9C657481BA9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*","matchCriteriaId":"D5D7202D-56DF-400B-9F09-E7D9938222D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*","matchCriteriaId":"4D4F0D21-A64B-46C1-9591-96529661DF0B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air_sdk:*:*:*:*:*:*:*:*","versionEndIncluding":"14.0.0.137","matchCriteriaId":"EADFC4AC-861F-4F47-AF20-18EED3866C41"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air_sdk:13.0.0.83:*:*:*:*:*:*:*","matchCriteriaId":"B005E5AC-DD7D-413E-92A2-4E8D7F3F2D7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air_sdk:13.0.0.111:*:*:*:*:*:*:*","matchCriteriaId":"F228403E-68B3-4B18-B120-066346D80891"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air_sdk:14.0.0.110:*:*:*:*:*:*:*","matchCriteriaId":"73E1378C-8C12-4728-BC84-2836691C2B11"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","versionEndIncluding":"11.2.202.394","matchCriteriaId":"7374A426-E2EB-49A2-8E4E-DE4DA0C4EC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.223:*:*:*:*:*:*:*","matchCriteriaId":"146E1EAC-B9AF-4511-A0DC-A048428E3B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.228:*:*:*:*:*:*:*","matchCriteriaId":"5AFBB9EA-1A66-4FBC-BF89-7DF04FDD6788"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.233:*:*:*:*:*:*:*","matchCriteriaId":"39065E60-3680-4384-95C0-EF4F874D2400"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.235:*:*:*:*:*:*:*","matchCriteriaId":"2B0603B3-5C98-422D-A49D-EBE1798DAE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.236:*:*:*:*:*:*:*","matchCriteriaId":"5AC7882D-1577-4CEA-B1C0-0FEBC91A441A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.238:*:*:*:*:*:*:*","matchCriteriaId":"CED86796-B721-49B1-A021-82FA769FA024"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.243:*:*:*:*:*:*:*","matchCriteriaId":"FF7843C6-628A-4091-8A09-6E126A89870E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.251:*:*:*:*:*:*:*","matchCriteriaId":"472F569C-0FD5-4F61-A4D6-258A8A9C4008"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.258:*:*:*:*:*:*:*","matchCriteriaId":"1E91A468-191C-4A2D-B1B6-0DDE8BB1C1D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.261:*:*:*:*:*:*:*","matchCriteriaId":"47F94E94-C190-4559-8FF6-FEEE6634B67B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.262:*:*:*:*:*:*:*","matchCriteriaId":"7CC3FDE1-44FD-4BC3-BB43-C44C94D3F794"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.270:*:*:*:*:*:*:*","matchCriteriaId":"FE46E137-5298-44FA-B40C-6079C9AEE60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.273:*:*:*:*:*:*:*","matchCriteriaId":"D14EAFB3-3718-466F-8EB2-61D00D569251"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.275:*:*:*:*:*:*:*","matchCriteriaId":"FD3390A0-8EB6-424E-96AC-B87E22D6FF6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.280:*:*:*:*:*:*:*","matchCriteriaId":"CCD935A5-D923-48CC-9699-977C5123D52C"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.285:*:*:*:*:*:*:*","matchCriteriaId":"5AABFF8D-2C2A-4B8B-9DE2-C74EECEDD86F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.291:*:*:*:*:*:*:*","matchCriteriaId":"DD0EF3E4-C91F-4AD4-91E7-A10DC66DE4A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.297:*:*:*:*:*:*:*","matchCriteriaId":"3DDB9C24-953C-4268-8C4A-E7C0F021698E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.310:*:*:*:*:*:*:*","matchCriteriaId":"E8474A98-24F4-43E5-9402-319F68A9880B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.332:*:*:*:*:*:*:*","matchCriteriaId":"0CD7F4E8-742E-4264-84EE-22D9E3CB3C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.335:*:*:*:*:*:*:*","matchCriteriaId":"97DBA814-D400-440C-BEEA-AB1913F783C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.336:*:*:*:*:*:*:*","matchCriteriaId":"9CDA6379-D70E-476C-82C5-C916C13CA081"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.341:*:*:*:*:*:*:*","matchCriteriaId":"515589AD-8CC1-46CE-9F9A-BAAD725E2C8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.346:*:*:*:*:*:*:*","matchCriteriaId":"308488AB-3D95-4231-8201-BF4EE5C9C151"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.350:*:*:*:*:*:*:*","matchCriteriaId":"DDB40406-277E-4BF5-ADCF-BE16B1CF390B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.356:*:*:*:*:*:*:*","matchCriteriaId":"33165339-9DCC-46B2-B22F-CF31D26175D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.359:*:*:*:*:*:*:*","matchCriteriaId":"28AB62F3-9CB0-4ED8-9785-2B4878BB101D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:flash_player:11.2.202.378:*:*:*:*:*:*:*","matchCriteriaId":"AF423A60-6377-4782-B809-D6304322F391"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*","versionEndIncluding":"14.0.0.110","matchCriteriaId":"1601647A-06A7-4D82-9BF0-5DCAAC5A2114"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:13.0.0.83:*:*:*:*:*:*:*","matchCriteriaId":"3C898203-9D6E-4430-8905-C28180F954E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_air:13.0.0.111:*:*:*:*:*:*:*","matchCriteriaId":"434B6846-3ED5-4F23-88D1-567668EE8E94"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF61F35-5905-4BA9-AD7E-7DB261D2F256"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"5333","Ordinal":"1","Title":"CVE-2014-5333","CVE":"CVE-2014-5333","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"5333","Ordinal":"1","NoteData":"Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API, in conjunction with a manipulation involving a '$' (dollar sign) or '(' (open parenthesis) character. NOTE: this issue exists because of an incomplete fix for CVE-2014-4671.","Type":"Description","Title":"CVE-2014-5333"},{"CveYear":"2014","CveId":"5333","Ordinal":"2","NoteData":"2014-08-19","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"5333","Ordinal":"3","NoteData":"2017-09-07","Type":"Other","Title":"Modified"}]}}}