[ CVE-2014-0497 · Published 5 Feb 2014 ]
Adobe Flash Player Integer Underflow Vulnerablity
Exploited · CISA KEV CVSS 9.8
EPSS 100%Fix available
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2024-09-17
- EPSS: 100% chance of exploitation in the next 30 days (higher than 100% of CVEs)
- Critical severity: CVSS 9.8
[ Description ]Official description
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
CISA: Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 8 Oct 2024): The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
- Patch on helpx.adobe.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- googlechromereleases.blogspot.com/2014/02/stable-channel-update.htmlRelease Notes
- helpx.adobe.com/security/products/flash-player/apsb14-04.htmlBroken LinkPatchVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2014-02/msg00000.htmlMailing List
- lists.opensuse.org/opensuse-security-announce/2014-02/msg00001.htmlMailing List
- lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.htmlMailing List
- rhn.redhat.com/errata/RHSA-2014-0137.htmlThird Party Advisory
- secunia.com/advisories/56437Broken LinkThird Party Advisory
- secunia.com/advisories/56737Broken LinkThird Party Advisory
- secunia.com/advisories/56780Broken LinkThird Party Advisory
- secunia.com/advisories/56799Broken LinkThird Party Advisory
- secunia.com/advisories/56839Broken LinkThird Party Advisory
- www.exploit-db.com/exploits/33212Third Party AdvisoryVDB Entry
- www.osvdb.org/102849Broken Link
- www.securityfocus.com/bid/65327Broken LinkThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1029715Broken LinkThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/90884Third Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource