CVE-2017-11282

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 35%

from disclosure to weapon0 days

Published on NVDDec 1

1st PoCSep 25

exploitation probability

35%top 2% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.

Affected products

n/a · Adobe Flash Player 26.0.0.151 and earlier versions

public PoCs found — 3

cve_referencepacketstormsecurity.com/files/144332/Adobe-Flash-appleToRange-Out-Of-Bounds-Read.htmlunverified exploitdbwww.exploit-db.com/exploits/42783unverified cve_referencewww.exploit-db.com/exploits/42783/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/144332/Adobe-Flash-appleToRange-Out-Of-Bounds-Read.html https://access.redhat.com/errata/RHSA-2017:2702 https://bugs.chromium.org/p/project-zero/issues/detail?id=1323 https://helpx.adobe.com/security/products/flash-player/apsb17-28.html https://security.gentoo.org/glsa/201709-16 https://www.exploit-db.com/exploits/42783/https://www.youtube.com/watch?v=6iZnIQbRf5M http://www.securityfocus.com/bid/100716 http://www.securitytracker.com/id/1039314