CVE-2014-0497: adobe flash player +8 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2014-0497

CVSS 9.8 · Critical KEV · sudah dieksploitasi EPSS 99,9%

Kerentanan Integer Underflow (Wrap or Wraparound) pada adobe flash player, google chrome +7 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD. Masuk katalog KEV CISA pada 17 September 2024, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.

Rincian

Terbit di NVD: 5 Februari 2014
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-191: Integer Underflow (Wrap or Wraparound)
EPSS (30 hari): 99,9% peluang dieksploitasi; lebih tinggi dari 99,9% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: Adobe Flash Player Integer Underflow Vulnerablity
Masuk KEV: 17 September 2024
Tenggat CISA: 8 Oktober 2024 (untuk instansi federal AS)
Ransomware: Belum tercatat
Tindakan wajib: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
adobe	flash player	Semua versi sebelum 11.2.202.336
adobe	flash player	Semua versi sebelum 11.7.700.261
adobe	flash player	Versi 11.8.800.94 hingga sebelum 12.0.0.44
google	chrome	Semua versi sebelum 32.0.1700.107
redhat	enterprise linux desktop	Versi 5.0
redhat	enterprise linux desktop	Versi 6.0
redhat	enterprise linux eus	Versi 6.5
redhat	enterprise linux server	Versi 5.0
redhat	enterprise linux server	Versi 6.0
redhat	enterprise linux server aus	Versi 6.5
redhat	enterprise linux workstation	Versi 5.0
redhat	enterprise linux workstation	Versi 6.0
opensuse	opensuse	Versi 11.4
opensuse	opensuse	Versi 12.3
opensuse	opensuse	Versi 13.1
suse	linux enterprise desktop	Versi 11 sp2
suse	linux enterprise desktop	Versi 11 sp3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

http://helpx.adobe.com/security/products/flash-player/apsb14-04.html broken link · patch · advisory vendor
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0497 pemerintah AS
http://rhn.redhat.com/errata/RHSA-2014-0137.html advisory pihak ketiga
http://secunia.com/advisories/56437 broken link · advisory pihak ketiga
http://secunia.com/advisories/56737 broken link · advisory pihak ketiga
http://secunia.com/advisories/56780 broken link · advisory pihak ketiga
http://secunia.com/advisories/56799 broken link · advisory pihak ketiga
http://secunia.com/advisories/56839 broken link · advisory pihak ketiga
http://www.exploit-db.com/exploits/33212 advisory pihak ketiga · vdb entry
http://www.securityfocus.com/bid/65327 broken link · advisory pihak ketiga · vdb entry
http://www.securitytracker.com/id/1029715 broken link · advisory pihak ketiga · vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90884 advisory pihak ketiga · vdb entry
http://googlechromereleases.blogspot.com/2014/02/stable-channel-update.html release notes
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00000.html mailing list
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00001.html mailing list
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.html mailing list
http://www.osvdb.org/102849 broken link

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.