CVE-2014-0501

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-12 · updated 2026-06-17
Weakness: CWE-119

Description

Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0500.

Affected products

Adobe Shockwave Player: through 12.0.7.148; 11.0.0.456, 11.0.3.471, 11.5.0.595, 11.5.0.596, 11.5.1.601, 11.5.2.602 (+19)

References

http://helpx.adobe.com/security/products/shockwave/apsb14-06.html
http://osvdb.org/103158
http://secunia.com/advisories/56740
http://www.securityfocus.com/bid/65493
http://www.securitytracker.com/id/1029740
https://exchange.xforce.ibmcloud.com/vulnerabilities/91008
http://helpx.adobe.com/security/products/shockwave/apsb14-06.html
http://osvdb.org/103158
http://secunia.com/advisories/56740
http://www.securityfocus.com/bid/65493
http://www.securitytracker.com/id/1029740
https://exchange.xforce.ibmcloud.com/vulnerabilities/91008

Get alerted when CVE-2014-0501 or the next vulnerability affects your stack