Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-3114

Опубликовано: 09 дек. 2017
Источник: ubuntu
Приоритет: medium
EPSS Средний
CVSS2: 10
CVSS3: 9.8

Описание

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of providing language- and region- or country- specific functionality. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.

РелизСтатусПримечание
artful

released

1:20171114.1-0ubuntu0.17.10.1
devel

released

1:20171114.1-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [1:20171114.1-0ubuntu0.14.04.1]]
precise/esm

DNE

trusty

released

1:20171114.1-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [1:20171114.1-0ubuntu0.14.04.1]
upstream

released

27.0.0.187
xenial

released

1:20171114.1-0ubuntu0.16.04.1
zesty

released

1:20171114.1-0ubuntu0.17.04.1

Показывать по

РелизСтатусПримечание
artful

released

27.0.0.187ubuntu0.17.10.1
devel

released

27.0.0.187ubuntu1
esm-apps/xenial

released

27.0.0.187ubuntu0.16.04.1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [27.0.0.187ubuntu0.14.04.1]]
precise/esm

DNE

trusty

released

27.0.0.187ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [27.0.0.187ubuntu0.14.04.1]
upstream

released

27.0.0.187
xenial

released

27.0.0.187ubuntu0.16.04.1
zesty

released

27.0.0.187ubuntu0.17.04.1

Показывать по

Ссылки на источники

EPSS

Процентиль: 93%
0.10135
Средний

10 Critical

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 8.8
redhat
больше 7 лет назад

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of providing language- and region- or country- specific functionality. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.

CVSS3: 9.8
nvd
больше 7 лет назад

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of providing language- and region- or country- specific functionality. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.

CVSS3: 9.8
github
около 3 лет назад

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of providing language- and region- or country- specific functionality. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.

CVSS3: 9.8
fstec
больше 7 лет назад

Уязвимость программной платформы Flash Player, связанная с чтением данных за границами буфера в памяти, позволяющая нарушителю выпонить произвольный код

msrc
больше 7 лет назад

November 2017 Adobe Flash Security Update

EPSS

Процентиль: 93%
0.10135
Средний

10 Critical

CVSS2

9.8 Critical

CVSS3

Уязвимость CVE-2017-3114