Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-0497


Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.


Published

2014-02-05T05:15:29.897

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-191
  • Type: Secondary
    CWE-191

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application adobe flash_player < 11.2.202.336 Yes
Operating System linux linux_kernel * No
Application adobe flash_player < 11.7.700.261 Yes
Application adobe flash_player < 12.0.0.44 Yes
Operating System apple mac_os_x * No
Operating System microsoft windows - No
Application google chrome < 32.0.1700.107 Yes
Operating System apple macos - No
Operating System google chrome_os - No
Operating System linux linux_kernel - No
Operating System microsoft windows - No
Operating System redhat enterprise_linux_desktop 5.0 Yes
Operating System redhat enterprise_linux_desktop 6.0 Yes
Operating System redhat enterprise_linux_eus 6.5 Yes
Operating System redhat enterprise_linux_server 5.0 Yes
Operating System redhat enterprise_linux_server 6.0 Yes
Operating System redhat enterprise_linux_server_aus 6.5 Yes
Operating System redhat enterprise_linux_workstation 5.0 Yes
Operating System redhat enterprise_linux_workstation 6.0 Yes
Operating System opensuse opensuse 11.4 Yes
Operating System opensuse opensuse 12.3 Yes
Operating System opensuse opensuse 13.1 Yes
Operating System suse linux_enterprise_desktop 11 Yes
Operating System suse linux_enterprise_desktop 11 Yes

References