Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-11292

Опубликовано: 16 окт. 2017
Источник: redhat
CVSS3: 8.8
EPSS Средний

Описание

Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.

Дополнительная информация

Статус:

Critical
https://bugzilla.redhat.com/show_bug.cgi?id=1502726flash-plugin: remote code execution vulnerability (APSB17-32)

EPSS

Процентиль: 96%
0.11214
Средний

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 9 лет назад

Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.

CVSS3: 8.8
nvd
около 9 лет назад

Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.

CVSS3: 8.8
github
больше 4 лет назад

Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.

CVSS3: 8.8
fstec
около 9 лет назад

Уязвимость программной платформы Adobe Flash Player, связанная с неправильным индексированием массива данных, позволяющая нарушителю выполнить произвольный код

msrc
около 9 лет назад

October 2017 Adobe Flash Security Update

EPSS

Процентиль: 96%
0.11214
Средний

8.8 High

CVSS3