CVE:CVE-2014-0532
CNNVD:CNNVD-201406-243
Adobe Flash Player和Adobe AIR都是美国奥多比（Adobe）公司的产品。Adobe Flash Player是一款多媒体播放器产品。Adobe AIR是一个跨操作系统的运行时环境，可用于建立和配置跨平台的桌面RIA（Rich Internet Applications）应用。
Adobe Flash Player和Adobe AIR中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。以下软件和版本受到影响：基于Windows和OS X平台的Adobe Flash Player 13.0.0.214及之前的版本和基于Linux平台的Adobe Flash Player 11.2.202.359及之前的版本；Adobe AIR 13.0.0.111及之前的版本，Adobe AIR SDK 13.0.0.111及之前的版本，Adobe AIR SDK & Compiler 13.0.0.111及之前的版本。
solution:Upgrade adobe adobe_air_sdk to a higher version than 13.0.0.111,13.0.0.83,and avoid the version (,13.0.0.111],13.0.0.83; Upgrade adobe adobe_air to a higher version than 13.0.0.111,13.0.0.83,and avoid the version (,13.0.0.111],13.0.0.83; Upgrade adobe flash_player to a higher version than 13.0.0.214,13.0.0.182,13.0.0.201,13.0.0.206,11.2.202.359,11.2.202.223,11.2.202.228,11.2.202.233,11.2.202.235,11.2.202.236,11.2.202.238,11.2.202.243,11.2.202.251,11.2.202.258,11.2.202.261,11.2.202.262,11.2.202.270,11.2.202.273,11.2.202.275,11.2.202.280,11.2.202.285,11.2.202.291,11.2.202.297,11.2.202.310,11.2.202.332,11.2.202.335,11.2.202.336,11.2.202.341,11.2.202.346,11.2.202.350,11.2.202.356,and avoid the version (,13.0.0.214],13.0.0.182,13.0.0.201,13.0.0.206,(,11.2.202.359],11.2.202.223,11.2.202.228,11.2.202.233,11.2.202.235,11.2.202.236,11.2.202.238,11.2.202.243,11.2.202.251,11.2.202.258,11.2.202.261,11.2.202.262,11.2.202.270,11.2.202.273,11.2.202.275,11.2.202.280,11.2.202.285,11.2.202.291,11.2.202.297,11.2.202.310,11.2.202.332,11.2.202.335,11.2.202.336,11.2.202.341,11.2.202.346,11.2.202.350,11.2.202.356