VULNERABILITY INTELLIGENCE
CVE-2014-0497
CVSS score9.8 CRITICAL
EPSS probability99.88%
CISA KEVKnown exploited vulnerability
Published2014-02-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Adobe Flash Player Integer Underflow Vulnerablity
Vendor / product: Adobe / Flash Player
Description
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
Weakness classification
- CWE-191: Integer Underflow (Wrap or Wraparound)
Primary references
- psirt@adobe.com — Release Notes
- psirt@adobe.com — Broken Link, Patch, Vendor Advisory
- psirt@adobe.com — Mailing List
- psirt@adobe.com — Mailing List
- psirt@adobe.com — Mailing List
- psirt@adobe.com — Third Party Advisory
- psirt@adobe.com — Broken Link, Third Party Advisory
- psirt@adobe.com — Broken Link, Third Party Advisory
- psirt@adobe.com — Broken Link, Third Party Advisory
- psirt@adobe.com — Broken Link, Third Party Advisory
- psirt@adobe.com — Broken Link, Third Party Advisory
- psirt@adobe.com — Third Party Advisory, VDB Entry