Critical severity · published Feb 5, 2014
CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
In wildKEV
9.8
CVSS
99.9%
EPSS
Yes
On KEV
Description
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)99.9% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Sep 17, 2024
Federal remediation dueOct 8, 2024
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrome · Google
before 32.0.1700.107 · source: NVD
EL
Enterprise Linux Desktop · Redhat
5.0; 6.0 · source: NVD
EL
Enterprise Linux Eus · Redhat
6.5 · source: NVD
EL
Enterprise Linux Server · Redhat
5.0; 6.0 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
6.5 · source: NVD
EL
Enterprise Linux Workstation · Redhat
5.0; 6.0 · source: NVD
FP
Flash Player · Adobe
before 11.2.202.336; before 11.7.700.261; 11.8.800.94 before 12.0.0.44 · source: NVD, CISA, KEV
LE
Linux Enterprise Desktop · Suse
11; 11 · source: NVD
OP
Opensuse · Opensuse
11.4; 12.3; 13.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0497
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0497
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
exploit
http://www.exploit-db.com/exploits/33212
x_refsource_CONFIRM
http://helpx.adobe.com/security/products/flash-player/apsb14-04.html
x_refsource_CONFIRM
http://googlechromereleases.blogspot.com/2014/02/stable-channel-update.html
vendor-advisory
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.html
vendor-advisory
http://rhn.redhat.com/errata/RHSA-2014-0137.html
vdb-entry
http://www.osvdb.org/102849
More from Chrome
9.8
CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4671
Google Chromium Visuals Use-After-Free Vulnerability