SECUFOCUSNOW
Home›CVE index›CVE-2014-0497
CISA KEV · Known exploitedCritical

CVE-2014-0497

Adobe Flash Player

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS
9.8
EPSS
99.9%
100.0% percentile
CISA KEV
Listed
Published
2014.02.05
PRIORITY ASSESSMENT

Immediate review

CISA has listed this vulnerability in the Known Exploited Vulnerabilities catalog.

Known exploitationConfirmed by CISA KEV
Exploit probability99.9%
Technical severityCVSS 9.8

Vulnerability overview

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.

Affected product and versions

Product
Adobe Flash Player
Affected versions
12.0.0, < 11.2.202.336, < 11.7.700.261, >= 11.8.800.94 < 12.0.0.44, < 32.0.1700.107, 5.0, 6.0, 6.5, 11.4, 12.3, 13.1, 11
Fixed versions
11.2.202.336, 11.7.700.261, 12.0.0.44, 32.0.1700.107

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
CISA required action

The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Due date: 2024.10.08
  1. 1
    Identify

    Confirm that Adobe Flash Player and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-191
KEV added
2024.09.17
Ransomware use
미확인
CVE-2014-0497 — Adobe Flash Player | SECUFOCUS NOW