critical9.8Public exploit code
CVE-2017-11282
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adobe Flash - Out-of-Bounds Read in applyToRange2017-09-25 · dos · multiple · Verified
Impact
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Flash Player | through 26.0.0.151 |
| Redhat | Enterprise Linux Desktop | Version 6.0 |
| Redhat | Enterprise Linux Server | Version 6.0 |
| Redhat | Enterprise Linux Workstation | Version 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/144332/Adobe-Flash-appleToRange-Out-Of-Bounds-Read.html
- http://www.securityfocus.com/bid/100716
- http://www.securitytracker.com/id/1039314
- https://access.redhat.com/errata/RHSA-2017:2702
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1323
- https://helpx.adobe.com/security/products/flash-player/apsb17-28.html
- https://security.gentoo.org/glsa/201709-16
- https://www.exploit-db.com/exploits/42783/
- https://www.youtube.com/watch?v=6iZnIQbRf5M
- http://packetstormsecurity.com/files/144332/Adobe-Flash-appleToRange-Out-Of-Bounds-Read.html
- http://www.securityfocus.com/bid/100716
- http://www.securitytracker.com/id/1039314
- https://access.redhat.com/errata/RHSA-2017:2702
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1323
- https://helpx.adobe.com/security/products/flash-player/apsb17-28.html
- https://security.gentoo.org/glsa/201709-16
- https://www.exploit-db.com/exploits/42783/
- https://www.youtube.com/watch?v=6iZnIQbRf5M