Adobe Flash Player And AIR CVE-2014-0491 Remote Security Bypass Vulnerability

Bugtraq ID:	64807
Class:	Unknown
CVE:	CVE-2014-0491
Remote:	Yes
Local:	No
Published:	Jan 14 2014 12:00AM
Updated:	Feb 06 2014 01:45PM
Credit:	Masato Kinugawa
Vulnerable:	SuSE openSUSE 11.4 Red Hat Enterprise Linux Workstation Supplementary 6 Red Hat Enterprise Linux Supplementary 5 server Red Hat Enterprise Linux Server Supplementary 6 Red Hat Enterprise Linux Desktop Supplementary 6 Red Hat Enterprise Linux Desktop Supplementary 5 client Gentoo Linux
Not Vulnerable:

Adobe Flash Player And AIR CVE-2014-0491 Remote Security Bypass Vulnerability

Adobe Flash Player and Adobe AIR are prone to an unspecified remote security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks.

Adobe Flash Player And AIR CVE-2014-0491 Remote Security Bypass Vulnerability

Reports indicate that this issue is being exploited in the wild.

Adobe Flash Player And AIR CVE-2014-0491 Remote Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Adobe Flash Player And AIR CVE-2014-0491 Remote Security Bypass Vulnerability

References:

• Adobe Homepage (Adobe)