CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
Published Feb 4, 2014 · updated Jun 16, 2026 · adobe flash player
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
Timeline
Detection, updates, and resolution for this record.
Feb 4, 2014 · Catalog
Detected
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
Sep 17, 2024 · CISA KEV
Known exploited
The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
Oct 8, 2024 · CISA KEV
Remediation due
The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
Jun 16, 2026 · Catalog
Updated
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
Required action
The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
CISA due date Oct 8, 2024
Affected
- cpe adobe/flash playerversion unspecified
- cpe google/chromeversion unspecified
- cpe opensuse/opensuse11.4
- cpe redhat/enterprise linux desktop5.0
- cpe redhat/enterprise linux desktop6.0
- cpe redhat/enterprise linux eus6.5
- cpe redhat/enterprise linux server5.0
- vendor Adobe Flash Playerversion unspecified
Sources
- CISA KEVCVE-2014-0497
Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.
cisa.gov - CVE.orgCVE-2014-0497
Official CVE identifier
cve.org - FIRST EPSSCVE-2014-0497
30-day exploitation probability 99.9%
first.org - Exploit Database33212
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_windows/browser/adobe_flash_avm2
Public module reference (normal). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2014-0497
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
nvd.nist.gov