{"id":"CVE-2014-0497","url":"https://www.cyber-defence.io/tools/cve/CVE-2014-0497","generatedAt":"2026-10-31T22:34:25.143Z","title":"Adobe Flash Player Integer Underflow Vulnerablity","description":"Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.","published":"2014-02-05T05:15:30.000Z","lastModified":"2026-06-17T00:03:09.000Z","status":"Analyzed","sourceIdentifier":"psirt@adobe.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-191"],"affected":["adobe/flash player","google/chrome","redhat/enterprise linux desktop","redhat/enterprise linux eus","redhat/enterprise linux server","redhat/enterprise linux server aus","redhat/enterprise linux workstation","opensuse/opensuse","suse/linux enterprise desktop"],"epss":{"score":0.99879,"percentile":0.99965,"date":"2026-10-30","history":[]},"kev":{"listed":true,"dateAdded":"2024-09-17","dueDate":"2024-10-08","knownRansomwareCampaignUse":"Unknown","notes":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.\nhttps://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2014-0497"},"exploits":{"count":1,"verified":true,"firstPublished":"2014-05-06","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":33212,"kind":"exploit","title":"Adobe Flash Player - Integer Underflow Remote Code Execution (Metasploit)","url":"https://www.exploit-db.com/exploits/33212","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/33212.rb","file":"exploits/windows/remote/33212.rb","published":"2014-05-06","added":"2014-05-06","updated":"2014-05-06","author":"Metasploit","type":"remote","platform":"windows","port":null,"verified":true,"codes":["CVE-2014-0497","OSVDB-102849"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 8 October 2024). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[],"references":[{"url":"http://googlechromereleases.blogspot.com/2014/02/stable-channel-update.html","tags":["Release Notes"],"source":"psirt@adobe.com"},{"url":"http://helpx.adobe.com/security/products/flash-player/apsb14-04.html","tags":["Broken Link","Patch","Vendor Advisory"],"source":"psirt@adobe.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00000.html","tags":["Mailing List"],"source":"psirt@adobe.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00001.html","tags":["Mailing List"],"source":"psirt@adobe.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.html","tags":["Mailing List"],"source":"psirt@adobe.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0137.html","tags":["Third Party Advisory"],"source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/56437","tags":["Broken Link","Third Party Advisory"],"source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/56737","tags":["Broken Link","Third Party Advisory"],"source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/56780","tags":["Broken Link","Third Party Advisory"],"source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/56799","tags":["Broken Link","Third Party Advisory"],"source":"psirt@adobe.com"},{"url":"http://secunia.com/advisories/56839","tags":["Broken Link","Third Party Advisory"],"source":"psirt@adobe.com"},{"url":"http://www.exploit-db.com/exploits/33212","tags":["Third Party Advisory","VDB Entry"],"source":"psirt@adobe.com"},{"url":"http://www.osvdb.org/102849","tags":["Broken Link"],"source":"psirt@adobe.com"},{"url":"http://www.securityfocus.com/bid/65327","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"psirt@adobe.com"},{"url":"http://www.securitytracker.com/id/1029715","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"psirt@adobe.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90884","tags":["Third Party Advisory","VDB Entry"],"source":"psirt@adobe.com"},{"url":"http://googlechromereleases.blogspot.com/2014/02/stable-channel-update.html","tags":["Release Notes"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://helpx.adobe.com/security/products/flash-player/apsb14-04.html","tags":["Broken Link","Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00000.html","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00001.html","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.html","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0137.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/56437","tags":["Broken Link","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/56737","tags":["Broken Link","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/56780","tags":["Broken Link","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/56799","tags":["Broken Link","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/56839","tags":["Broken Link","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/33212","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/102849","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/65327","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1029715","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90884","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0497","tags":["US Government Resource"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-0497","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}