Description
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| adobe | flash_player | < 11.7.700.261; >= 12.0.0, <= 12.0.0.44 |
| adobe | flash_player | < 11.7.700.261; >= 12.0.0, <= 12.0.0.44 |
References
- http://googlechromereleases.blogspot.com/2014/02/stable-channel-update.htmlRelease Notes
- http://helpx.adobe.com/security/products/flash-player/apsb14-04.htmlBroken Link, Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00000.htmlMailing List
- http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00001.htmlMailing List
- http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.htmlMailing List
- http://rhn.redhat.com/errata/RHSA-2014-0137.htmlThird Party Advisory
- http://secunia.com/advisories/56437Broken Link, Third Party Advisory
- http://secunia.com/advisories/56737Broken Link, Third Party Advisory
- http://secunia.com/advisories/56780Broken Link, Third Party Advisory
- http://secunia.com/advisories/56799Broken Link, Third Party Advisory
- http://secunia.com/advisories/56839Broken Link, Third Party Advisory
- http://www.exploit-db.com/exploits/33212Third Party Advisory, VDB Entry
- http://www.osvdb.org/102849Broken Link
- http://www.securityfocus.com/bid/65327Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029715Broken Link, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90884Third Party Advisory, VDB Entry
- http://googlechromereleases.blogspot.com/2014/02/stable-channel-update.htmlRelease Notes
- http://helpx.adobe.com/security/products/flash-player/apsb14-04.htmlBroken Link, Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00000.htmlMailing List
- http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00001.htmlMailing List
- http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.htmlMailing List
- http://rhn.redhat.com/errata/RHSA-2014-0137.htmlThird Party Advisory
- http://secunia.com/advisories/56437Broken Link, Third Party Advisory
- http://secunia.com/advisories/56737Broken Link, Third Party Advisory
- http://secunia.com/advisories/56780Broken Link, Third Party Advisory
- http://secunia.com/advisories/56799Broken Link, Third Party Advisory
- http://secunia.com/advisories/56839Broken Link, Third Party Advisory
- http://www.exploit-db.com/exploits/33212Third Party Advisory, VDB Entry
- http://www.osvdb.org/102849Broken Link
- http://www.securityfocus.com/bid/65327Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029715Broken Link, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90884Third Party Advisory, VDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0497US Government Resource
Timeline
- Published
- Feb 5, 2014
- Last modified
- Jun 17, 2026
- Added to CISA KEV
- Sep 17, 2024
- NVD status
- Analyzed