Vulnerability Description
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Flash Player | < 11.2.202.336 |
| Linux | Linux Kernel | All versions |
| Apple | Mac Os X | All versions |
| Microsoft | Windows | - |
| Chrome | < 32.0.1700.107 | |
| Apple | Macos | - |
| Chrome Os | - | |
| Redhat | Enterprise Linux Desktop | 5.0 |
| Redhat | Enterprise Linux Eus | 6.5 |
| Redhat | Enterprise Linux Server | 5.0 |
| Redhat | Enterprise Linux Server Aus | 6.5 |
| Redhat | Enterprise Linux Workstation | 5.0 |
| Opensuse | Opensuse | 11.4 |
| Suse | Linux Enterprise Desktop | 11 |
Related Weaknesses (CWE)
References
- http://googlechromereleases.blogspot.com/2014/02/stable-channel-update.htmlRelease Notes
- http://helpx.adobe.com/security/products/flash-player/apsb14-04.htmlBroken LinkPatchVendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00000.htmlMailing List
- http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00001.htmlMailing List
- http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.htmlMailing List
- http://rhn.redhat.com/errata/RHSA-2014-0137.htmlThird Party Advisory
- http://secunia.com/advisories/56437Broken LinkThird Party Advisory
- http://secunia.com/advisories/56737Broken LinkThird Party Advisory
- http://secunia.com/advisories/56780Broken LinkThird Party Advisory
- http://secunia.com/advisories/56799Broken LinkThird Party Advisory
- http://secunia.com/advisories/56839Broken LinkThird Party Advisory
- http://www.exploit-db.com/exploits/33212Third Party AdvisoryVDB Entry
- http://www.osvdb.org/102849Broken Link
- http://www.securityfocus.com/bid/65327Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1029715Broken LinkThird Party AdvisoryVDB Entry
FAQ
What is CVE-2014-0497?
CVE-2014-0497 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arb...
How severe is CVE-2014-0497?
CVE-2014-0497 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2014-0497?
Check the references section above for vendor advisories and patch information. Affected products include: Adobe Flash Player, Linux Linux Kernel, Apple Mac Os X, Microsoft Windows, Google Chrome.