Candidate: CVE-2014-0580 PublicDate: 2014-12-10 21:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0580 http://helpx.adobe.com/security/products/flash-player/apsb14-27.html Description: Adobe Flash Player before 13.0.0.259 and 14.x through 16.x before 16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: chriscoulson CVSS: Patches_flashplugin-nonfree: upstream_flashplugin-nonfree: released (11.2.202.425) lucid_flashplugin-nonfree: ignored (reached end-of-life) precise_flashplugin-nonfree: released (11.2.202.425ubuntu0.12.04.1) trusty_flashplugin-nonfree: released (11.2.202.425ubuntu0.14.04.1) trusty/esm_flashplugin-nonfree: DNE (trusty was released [11.2.202.425ubuntu0.14.04.1]) utopic_flashplugin-nonfree: released (11.2.202.425ubuntu0.14.10.1) devel_flashplugin-nonfree: released (11.2.202.425ubuntu1) Patches_adobe-flashplugin: upstream_adobe-flashplugin: released (11.2.202.425) lucid_adobe-flashplugin: ignored (reached end-of-life) precise_adobe-flashplugin: released (11.2.202.425-0precise1) trusty_adobe-flashplugin: released (11.2.202.425-0trusty1) trusty/esm_adobe-flashplugin: DNE (trusty was released [11.2.202.425-0trusty1]) utopic_adobe-flashplugin: released (11.2.202.425-0utopic1) devel_adobe-flashplugin: DNE