{"id":"CVE-2014-0497","published":"2014-02-05T05:15:29Z","modified":"2026-06-17T00:03:09Z","title":"Adobe Flash Player Integer Underflow Vulnerablity","vendor":"Adobe","product":"Flash Player","tier":"core","eol":null,"description":{"text":"Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.","provenance":"source","from":"NVD"},"summary":{"text":"Adobe Flash Player contains an integer underflow flaw (classified as an integer underflow / wraparound weakness) in its core handling code. A remote attacker can execute arbitrary code by exploiting unspecified vectors, requiring only network access to reach the affected Flash Player instance without authentication, with no additional conditions specified beyond the attacker being able to deliver the crafted input.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:11:04Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.99879,"percentile":0.99965,"date":"2026-10-28","provenance":"source"},"kev":{"dateAdded":"2024-09-17","dueDate":"2024-10-08","ransomware":false,"requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","notes":"https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2014-0497","provenance":"source"},"vulncheckKev":{"dateAdded":"2015-07-21","exploitedFirstSeen":"2015-07-21","ransomware":false,"evidence":[{"url":"https://resources.infosecinstitute.com/topic/the-hacking-team-hack-when-hackers-have-become-the-target/","date":"2015-07-21"},{"url":"https://securelist.com/darkhotels-attacks-in-2015/71713/","date":"2015-08-10"},{"url":"https://www.scribd.com/document/516749423/inzimam-2019-ijca-919742","date":"2019-12-26"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2024-09-17"}],"evidenceTotal":4,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[{"id":"CWE-191","name":"Integer Underflow (Wrap or Wraparound)"}],"references":[{"url":"http://googlechromereleases.blogspot.com/2014/02/stable-channel-update.html","tags":["Release Notes"]},{"url":"http://helpx.adobe.com/security/products/flash-player/apsb14-04.html","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00000.html","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00001.html","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.html","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0137.html","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/56437","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/56737","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/56780","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/56799","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/56839","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/33212","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/102849","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/65327","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1029715","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90884","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://googlechromereleases.blogspot.com/2014/02/stable-channel-update.html","tags":["Release Notes"]},{"url":"http://helpx.adobe.com/security/products/flash-player/apsb14-04.html","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00000.html","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00001.html","tags":["Mailing List"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.html","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0137.html","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/56437","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/56737","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/56780","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/56799","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/56839","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/33212","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/102849","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/65327","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1029715","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90884","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0497","tags":["US Government Resource"]}],"techniques":[{"id":"T1189","name":"Drive-by Compromise","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Remote attackers exploit Flash content via drive-by vectors","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"allows remote attackers to execute arbitrary code via unspecified vectors","start":162,"end":235}],"model":"claude-haiku-5-5","confidence":"low","confidenceNote":"server-side bug exploitable without user interaction; client-execution technique does not fit"},{"id":"T1203","name":"Exploitation for Client Execution","tactics":["execution"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Flash Player code execution upon client processing","mappingType":"primary_impact","evidence":[{"from":"description","quote":"allows remote attackers to execute arbitrary code via unspecified vectors","start":162,"end":235}],"model":"claude-haiku-5-5","confidence":"low","confidenceNote":"server-side bug exploitable without user interaction; client-execution technique does not fit"}],"reports":[{"id":"SRC-a8227fcf3c4ce984ed35","title":"Darkhotel’s attacks in 2015","publisher":"securelist.com","url":"https://securelist.com/darkhotels-attacks-in-2015/71713/","date":null,"mentions":[{"quote":"In addition to the icon.swf HT 0day (214709aa7c5e4e8b60759a175737bb2b), it looks as though the “tisone360.com” site was delivering a Flash CVE-2014-0497 exploit in April.","start":9181,"end":9351},{"quote":"and Previous Research\nCVE-2014-0497 – A 0-day","start":14794,"end":14839}]},{"id":"SRC-619721166ae9d9d7fdcd","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/4/4/C/44CDEF0E-7924-4787-A56A-16261691ACE3/Microsoft_Security_Intelligence_Report_Volume_19_English.pdf","date":null,"mentions":[{"quote":" CVE-2014-0497 is an integer underflow vulnerability.","start":93676,"end":93730},{"quote":"CVE-2014-0497","start":94075,"end":94088},{"quote":"40, 43, 50\r\nCVE-2010-3336, 52\r\nCVE-2011-1823, 50, 51\r\nCVE-2011-3874, 50, 51\r\nCVE-2012-0158, 52\r\nCVE-2012-0507, 47, 49\r\nCVE-2012-1723, 47, 48, 49\r\nCVE-2012-1889, 54\r\nCVE-2013-0074, 46\r\nCVE-2013-0422, 47, 49\r\nCVE-2013-2460, 46\r\nCVE-2013-2551, 46, 54\r\nCVE-2013-7331, 54\r\nCVE-2014-0322, 54\r\nCVE-2014-0497,","start":238003,"end":238304}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2014-0528","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-0528","exploited":true,"exploitedSince":"2024-09-17","provenance":"source"},"exploits":[{"id":33212,"url":"https://www.exploit-db.com/exploits/33212","title":"Adobe Flash Player - Integer Underflow Remote Code Execution (Metasploit)","type":"remote","platform":"windows","date":"2014-05-06","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2014-05-06"},"metasploit":[{"name":"Adobe Flash Player Integer Underflow Remote Code Execution","module":"exploit/windows/browser/adobe_flash_avm2","type":"exploit","disclosureDate":"2014-02-05","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_avm2.rb"}],"first":{"date":"2014-02-05","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_avm2.rb"},"provenance":"source"},"exploitRefs":["http://www.exploit-db.com/exploits/33212"],"flow":[{"stage":"related","techniques":["T1189","T1203"],"provenance":"ai","lowConfidence":true}],"timeline":[{"date":"2014-02-05","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0497","provenance":"source"},{"date":"2014-02-05","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2014-05-06","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_avm2.rb","provenance":"source"},{"date":"2015-07-21","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://resources.infosecinstitute.com/topic/the-hacking-team-hack-when-hackers-have-become-the-target/","provenance":"source"},{"date":"2024-09-17","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2024-09-17","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-0528","provenance":"source"}],"speed":{"daysToPublicExploit":0,"firstExploitFrom":"Metasploit","daysToKev":3877},"priority":{"score":76.0,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 4118 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.99,"detail":"percentile 0.9997"},{"name":"Named in threat reports","points":6.13,"detail":"2 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 Exploit-DB entry; 1 NVD exploit link; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}