CVE-2014-0497
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
Adobe Flash Player contains a math error that allows attackers to run harmful code on your computer. This happens when the program subtracts numbers incorrectly, creating a security gap that can be exploited through specially crafted content.
An integer underflow vulnerability in Adobe Flash Player (versions before 11.7.700.261, 11.8.x-12.0.x before 12.0.0.44 on Windows/macOS, and before 11.2.202.336 on Linux) allows remote code execution via unspecified attack vectors. The vulnerability enables attackers to bypass memory protections and execute arbitrary code in the context of the affected application.
The full analysis of this CVE is available in Portuguese →