Vulnerability Description
Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Flash Player | <= 26.0.0.151 |
| Apple | Macos | - |
| Linux | Linux Kernel | - |
| Microsoft | Windows | - |
| Chrome Os | - | |
| Microsoft | Windows 10 | - |
| Microsoft | Windows 8.1 | - |
| Redhat | Enterprise Linux Desktop | 6.0 |
| Redhat | Enterprise Linux Server | 6.0 |
| Redhat | Enterprise Linux Workstation | 6.0 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/100710Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039314Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:2702Third Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb17-28.htmlPatchVendor Advisory
- https://security.gentoo.org/glsa/201709-16Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/42781/Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/42782/Third Party AdvisoryVDB Entry
- https://www.youtube.com/watch?v=CvmnUeza9zwExploitThird Party Advisory
- http://www.securityfocus.com/bid/100710Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039314Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:2702Third Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb17-28.htmlPatchVendor Advisory
- https://security.gentoo.org/glsa/201709-16Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/42781/Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/42782/Third Party AdvisoryVDB Entry
FAQ
What is CVE-2017-11281?
CVE-2017-11281 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier...
How severe is CVE-2017-11281?
CVE-2017-11281 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2017-11281?
Check the references section above for vendor advisories and patch information. Affected products include: Adobe Flash Player, Apple Macos, Linux Linux Kernel, Microsoft Windows, Google Chrome Os.