CVE-2017-11282 Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.
CriticalCVSS 9.8
EPSS 34.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | <= 26.0.0.151 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 100716 third-party-advisory vdb-entry
- 1039314 third-party-advisory vdb-entry
- RHSA-2017:2702 third-party-advisory vendor-advisory
- bugs.chromium.org third-party-advisory
- helpx.adobe.com vendor-advisory
- GLSA-201709-16 third-party-advisory vdb-entry vendor-advisory
- 42783 exploit third-party-advisory vdb-entry
- www.youtube.com exploit third-party-advisory