CVE-2014-0497

adobe flash_player

Published 5 Feb 2014 · updated 17 Jun 2026 · Analyzed

9.8 Critical · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 17 Sept 2024, with a remediation deadline of 8 Oct 2024 for US federal agencies.

Required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Description

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.

References

googlechromereleases.blogspot.com/2014/02/stable-channel-update.html · Release Notes
helpx.adobe.com/security/products/flash-player/apsb14-04.html · Broken Link, Patch, Vendor Advisory
lists.opensuse.org/opensuse-security-announce/2014-02/msg00000.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2014-02/msg00001.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.html · Mailing List
rhn.redhat.com/errata/RHSA-2014-0137.html · Third Party Advisory
secunia.com/advisories/56437 · Broken Link, Third Party Advisory
secunia.com/advisories/56737 · Broken Link, Third Party Advisory
secunia.com/advisories/56780 · Broken Link, Third Party Advisory
secunia.com/advisories/56799 · Broken Link, Third Party Advisory
secunia.com/advisories/56839 · Broken Link, Third Party Advisory
www.exploit-db.com/exploits/33212 · Third Party Advisory, VDB Entry
www.osvdb.org/102849 · Broken Link
www.securityfocus.com/bid/65327 · Broken Link, Third Party Advisory, VDB Entry
www.securitytracker.com/id/1029715 · Broken Link, Third Party Advisory, VDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/90884 · Third Party Advisory, VDB Entry
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0497 · US Government Resource