{
  "id": "CVE-2014-0497",
  "url": "https://spydr.io/cve/CVE-2014-0497",
  "published": "2014-02-05T05:15:29.897Z",
  "modified": "2026-06-17T00:03:09.170Z",
  "score": 9.8,
  "severity": "critical",
  "cvss_version": "3.1",
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "score_source": "NVD",
  "epss": 0.99879,
  "epss_percentile": 0.99964,
  "exploited": true,
  "kev": {
    "added": "2024-09-17",
    "due": "2024-10-08",
    "action": "The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.",
    "ransomware": "Unknown",
    "name": "Adobe Flash Player Integer Underflow Vulnerablity",
    "notes": "https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2014-0497"
  },
  "ssvc_exploitation": "active",
  "vendors": [
    "adobe"
  ],
  "products": [
    "adobe flash_player"
  ],
  "cwes": [
    "CWE-191"
  ],
  "description": "Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.",
  "status": "Analyzed",
  "score_type": "Primary",
  "scores": {
    "cvss_v40": null,
    "cvss_v31": 9.8,
    "cvss_v30": null
  },
  "references": [
    {
      "url": "http://googlechromereleases.blogspot.com/2014/02/stable-channel-update.html",
      "tags": [
        "Release Notes"
      ]
    },
    {
      "url": "http://helpx.adobe.com/security/products/flash-player/apsb14-04.html",
      "tags": [
        "Broken Link",
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00000.html",
      "tags": [
        "Mailing List"
      ]
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00001.html",
      "tags": [
        "Mailing List"
      ]
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.html",
      "tags": [
        "Mailing List"
      ]
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2014-0137.html",
      "tags": [
        "Third Party Advisory"
      ]
    },
    {
      "url": "http://secunia.com/advisories/56437",
      "tags": [
        "Broken Link",
        "Third Party Advisory"
      ]
    },
    {
      "url": "http://secunia.com/advisories/56737",
      "tags": [
        "Broken Link",
        "Third Party Advisory"
      ]
    },
    {
      "url": "http://secunia.com/advisories/56780",
      "tags": [
        "Broken Link",
        "Third Party Advisory"
      ]
    },
    {
      "url": "http://secunia.com/advisories/56799",
      "tags": [
        "Broken Link",
        "Third Party Advisory"
      ]
    },
    {
      "url": "http://secunia.com/advisories/56839",
      "tags": [
        "Broken Link",
        "Third Party Advisory"
      ]
    },
    {
      "url": "http://www.exploit-db.com/exploits/33212",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ]
    },
    {
      "url": "http://www.osvdb.org/102849",
      "tags": [
        "Broken Link"
      ]
    },
    {
      "url": "http://www.securityfocus.com/bid/65327",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ]
    },
    {
      "url": "http://www.securitytracker.com/id/1029715",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ]
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90884",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ]
    },
    {
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0497",
      "tags": [
        "US Government Resource"
      ]
    }
  ],
  "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0497",
  "covered_in": [],
  "attribution": [
    {
      "source": "NVD",
      "url": "https://nvd.nist.gov",
      "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD."
    },
    {
      "source": "CISA KEV",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "notice": "Known exploited vulnerabilities from the CISA KEV catalog."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss",
      "notice": "Exploit prediction scores from FIRST EPSS."
    }
  ]
}