CVE-2014-0497

Published: Feb 5, 2014Modified: Apr 21, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.

Affected (17)

Products: Adobe: Flash Player · Google: Chrome · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Workstation · +2 more

Show all products

Adobe: Flash Player · Google: Chrome · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Workstation · Opensuse: Opensuse · Suse: Linux Enterprise Desktop

1 product

1 product

5 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Workstation

1 product

1 product

Linux Enterprise Desktop

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Adobe Flash Player	Before 11.2.202.336

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Configuration B

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Adobe Flash Player	Before 11.7.700.261
Adobe Flash Player	From 11.8.800.94 to 12.0.0.44

Running on/with	Platform Versions
Apple Mac Os X	All versions

Configuration C

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Google Chrome	Before 32.0.1700.107

Running on/with	Platform Versions
Apple Macos	All versions
Google Chrome Os	All versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Configuration D

8 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Eus	Version 6.5
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server Aus	Version 6.5
Redhat Enterprise Linux Workstation	Version 5.0
Redhat Enterprise Linux Workstation	Version 6.0

Configuration E

5 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.4
Opensuse Opensuse	Version 12.3
Opensuse Opensuse	Version 13.1
Suse Linux Enterprise Desktop	Version 11 sp2
Suse Linux Enterprise Desktop	Version 11 sp3

Related CWEs

Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

References (33)

http://googlechromereleases.blogspot.com/2014/02/stable-channel-update.html

Source: psirt@adobe.com

Release Notes

http://helpx.adobe.com/security/products/flash-player/apsb14-04.html

Source: psirt@adobe.com

Broken LinkPatchVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00000.html

Source: psirt@adobe.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00001.html

Source: psirt@adobe.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.html

Source: psirt@adobe.com

Mailing List

http://rhn.redhat.com/errata/RHSA-2014-0137.html

Source: psirt@adobe.com

Third Party Advisory

http://secunia.com/advisories/56437

Source: psirt@adobe.com

Broken LinkThird Party Advisory

http://secunia.com/advisories/56737

Source: psirt@adobe.com

Broken LinkThird Party Advisory

http://secunia.com/advisories/56780

Source: psirt@adobe.com

Broken LinkThird Party Advisory

http://secunia.com/advisories/56799

Source: psirt@adobe.com

Broken LinkThird Party Advisory

http://secunia.com/advisories/56839

Source: psirt@adobe.com

Broken LinkThird Party Advisory

http://www.exploit-db.com/exploits/33212

Source: psirt@adobe.com

Third Party AdvisoryVDB Entry

http://www.osvdb.org/102849

Source: psirt@adobe.com

Broken Link

http://www.securityfocus.com/bid/65327

Source: psirt@adobe.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1029715

Source: psirt@adobe.com

Broken LinkThird Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/90884

Source: psirt@adobe.com

Third Party AdvisoryVDB Entry

http://googlechromereleases.blogspot.com/2014/02/stable-channel-update.html

Source: af854a3a-2127-422b-91ae-364da2661108

Release Notes

http://helpx.adobe.com/security/products/flash-player/apsb14-04.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkPatchVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://rhn.redhat.com/errata/RHSA-2014-0137.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/56437

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party Advisory

http://secunia.com/advisories/56737

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party Advisory

http://secunia.com/advisories/56780

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party Advisory

http://secunia.com/advisories/56799

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party Advisory

http://secunia.com/advisories/56839

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party Advisory

http://www.exploit-db.com/exploits/33212

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.osvdb.org/102849

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/65327

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1029715

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/90884

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0497

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.