CVEvulnerability

CVE-2014-0497

9.8 CRITICAL Known exploited Published 2014-02-05 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Adobe Flash Player Integer Underflow Vulnerablity — Adobe Flash Player

Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.

Added to KEV
2024-09-17
Remediation due
2024-10-08
Ransomware use
Unknown
Required action
The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
Notes
https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2014-0497
Status
Analyzed
Published
2014-02-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-191

Description

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

• adobe flash player (< 11.2.202.336) • adobe flash player (< 11.7.700.261) • adobe flash player (>= 11.8.800.94 < 12.0.0.44) • google chrome (< 32.0.1700.107) • redhat enterprise linux desktop 5.0 • redhat enterprise linux desktop 6.0 • redhat enterprise linux eus 6.5 • redhat enterprise linux server 5.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server aus 6.5 • redhat enterprise linux workstation 5.0 • redhat enterprise linux workstation 6.0 • opensuse opensuse 11.4 • opensuse opensuse 12.3 • opensuse opensuse 13.1 • suse linux enterprise desktop 11

Related

Weakness · CWE (1)

  • CWE-191 Integer Underflow (Wrap or Wraparound) weakness

References