CVE-2017-11281

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Adobe Flash - Out-of-Bounds Write in MP4 Edge Processing2017-09-25 · dos · multiple · Verified
• Adobe Flash - Out-of-Bounds Memory Read in MP4 Parsing2017-09-25 · dos · multiple · Verified

Impact

Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://www.securityfocus.com/bid/100710
• http://www.securitytracker.com/id/1039314
• https://access.redhat.com/errata/RHSA-2017:2702
• https://helpx.adobe.com/security/products/flash-player/apsb17-28.html
• https://security.gentoo.org/glsa/201709-16
• https://www.exploit-db.com/exploits/42781/
• https://www.exploit-db.com/exploits/42782/
• https://www.youtube.com/watch?v=CvmnUeza9zw
• http://www.securityfocus.com/bid/100710
• http://www.securitytracker.com/id/1039314
• https://access.redhat.com/errata/RHSA-2017:2702
• https://helpx.adobe.com/security/products/flash-player/apsb17-28.html
• https://security.gentoo.org/glsa/201709-16
• https://www.exploit-db.com/exploits/42781/
• https://www.exploit-db.com/exploits/42782/
• https://www.youtube.com/watch?v=CvmnUeza9zw