Vulnerability Description
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Flash Player | <= 26.0.0.151 |
| Apple | Macos | - |
| Linux | Linux Kernel | - |
| Microsoft | Windows | - |
| Chrome Os | - | |
| Microsoft | Windows 10 | - |
| Microsoft | Windows 8.1 | - |
| Redhat | Enterprise Linux Desktop | 6.0 |
| Redhat | Enterprise Linux Server | 6.0 |
| Redhat | Enterprise Linux Workstation | 6.0 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/144332/Adobe-Flash-appleToRange-Out-Of-BounThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/100716Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039314Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:2702Third Party Advisory
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1323Third Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb17-28.htmlVendor Advisory
- https://security.gentoo.org/glsa/201709-16Third Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/42783/ExploitThird Party AdvisoryVDB Entry
- https://www.youtube.com/watch?v=6iZnIQbRf5MExploitThird Party Advisory
- http://packetstormsecurity.com/files/144332/Adobe-Flash-appleToRange-Out-Of-BounThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/100716Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039314Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:2702Third Party Advisory
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1323Third Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb17-28.htmlVendor Advisory
FAQ
What is CVE-2017-11282?
CVE-2017-11282 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.
How severe is CVE-2017-11282?
CVE-2017-11282 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2017-11282?
Check the references section above for vendor advisories and patch information. Affected products include: Adobe Flash Player, Apple Macos, Linux Linux Kernel, Microsoft Windows, Google Chrome Os.