What’s Vulnerable › Vulnerabilities

CVE-2014-0504

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-03-12 · updated 2026-06-17
• Weakness: CWE-200

Description

Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows attackers to read the clipboard via unspecified vectors.

Affected products

• Adobe Flash Player 24.0.0.186 and earlier.: from 11.0 before 11.2.202.346; from 11.0 before 11.7.700.272; from 11.8 before 12.0.0.77 — fixed in 11.2.202.346, 11.7.700.272, 12.0.0.77

How to fix

Upgrade to a fixed version: Adobe Flash Player 24.0.0.186 and earlier. 11.2.202.346, 11.7.700.272, 12.0.0.77. Check the vendor advisory for mitigations.

References

• http://helpx.adobe.com/security/products/flash-player/apsb14-08.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00013.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00014.html
• http://rhn.redhat.com/errata/RHSA-2014-0289.html
• http://security.gentoo.org/glsa/glsa-201405-04.xml
• http://helpx.adobe.com/security/products/flash-player/apsb14-08.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00013.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00014.html
• http://rhn.redhat.com/errata/RHSA-2014-0289.html
• http://security.gentoo.org/glsa/glsa-201405-04.xml

Get alerted when CVE-2014-0504 or the next vulnerability affects your stack