{"schemaVersion":3,"id":"MGASA-2014-0291","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated flash-player-plugin packages fix multiple vulnerabilities\n\nAdobe Flash Player 11.2.202.394 contains fixes to critical security\nvulnerabilities found in earlier versions that could potentially allow an\nattacker to take control of the affected system.\n\nThis update includes additional validation checks to ensure that Flash Player\nrejects malicious content from vulnerable JSONP callback APIs (CVE-2014-4671).\n\nThis update resolves security bypass vulnerabilities\n(CVE-2014-0537, CVE-2014-0539).","dates":{"published":"2014-07-09T23:21:32.000Z","modified":"2026-04-16T06:23:05.489Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"flash-player-plugin","name":"flash-player-plugin","label":"flash-player-plugin","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/flash-player-plugin","purlType":"rpm","versions":[{"text":"< 11.2.202.394-1.mga3.nonfree","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.2.202.394-1.mga3.nonfree","eol":null,"hubHref":null},{"vendor":"mageia","product":"flash-player-plugin","name":"flash-player-plugin","label":"flash-player-plugin","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/flash-player-plugin","purlType":"rpm","versions":[{"text":"< 11.2.202.394-1.mga4.nonfree","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.2.202.394-1.mga4.nonfree","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2014-0291.html","label":"advisories.mageia.org/MGASA-2014-0291.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"http://helpx.adobe.com/security/products/flash-player/apsb14-17.html","label":"helpx.adobe.com/security/products/flash-player/apsb14-17.html","hostname":"helpx.adobe.com","tags":["WEB"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13706","label":"bugs.mageia.org/show_bug.cgi?id=13706","hostname":"bugs.mageia.org","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2014-0537","CVE-2014-0539","CVE-2014-4671"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2014-07-09T23:21:32.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T06:23:05.489Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T18:24:31.814Z","stale":false,"partial":false}}