HTTP: Adobe Flash Player CVE-2014-0504 Information Disclosure
This signature detects attempts to exploit a known flaw in Adobe Flash player actionscript. An attack can entice a user to load a Flash file with malicious actionscript which can result in information disclosure.
Extended Description
Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows attackers to read the clipboard via unspecified vectors.
References
CVE: CVE-2014-0504
Short Name
HTTP:STC:ADOBE:SWF-INFO-DISC
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Adobe CVE-2014-0504 Disclosure Flash Information Player
Release Date
03/11/2014
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3761
False Positive
Unknown
CVSS Score
5.0