Adobe Pushes Fix for Flash Zero-Day Attack
Summary: Adobe urged Flash Player users to upgrade to version 12.0.0.44 after an exploit targeting a previously unknown critical vulnerability, CVE-2014-0497, was found in the wild and could give attackers complete control of affected systems. Adobe credited two Kaspersky Lab researchers for reporting the flaw and released few other details, while Krebs noted the vulnerability may relate to Kaspersky's Feb. 3 blog post about a long-running espionage campaign it calls "The Mask."
Why it matters: A zero-day that hands attackers complete control of a system was already being exploited before a patch existed, and the reporting trail points toward a long-running cyber espionage campaign rather than opportunistic crime.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2014-0497
- Related
- CVE-2014-0497: Adobe Flash Player Integer Underflow Vulnerablity Known Exploited Vulnerabilities · Sep 17, 2024New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026