Published: 11/01/2017 Updated: 17/11/2022

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 940

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Adobe Flash Player versions 24.0.0.186 and previous versions have an exploitable memory corruption vulnerability due to a concurrency error when manipulating a display list. Successful exploitation could lead to arbitrary code execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe flash_player

Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An update for flash-plugin is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Critical A Common Vulnerability Scoring Syst ...

Adobe Flash Player versions 2400186 and earlier have an exploitable memory corruption vulnerability due to a concurrency error when manipulating a display list Successful exploitation could lead to arbitrary code execution ...

Source: cosiggouvqcca/en/cosig-2017-01-en/ ##################################################################################### # Application: Adobe Flash Player # Platforms: Windows,OSX # Versions: 2400186 and earlier # Author: Francis Provencher of COSIG # Website: cosiggouvqcca/en/advisory/ # Twitter: @COSIG_ # Date: ...

CWE-787 https://helpx.adobe.com/security/products/flash-player/apsb17-02.html http://www.securityfocus.com/bid/95350 http://www.securitytracker.com/id/1037570 https://www.exploit-db.com/exploits/41012/https://www.exploit-db.com/exploits/41008/https://cosig.gouv.qc.ca/en/cosig-2017-01-en/http://packetstormsecurity.com/files/140463/Adobe-Flash-24.0.0.186-Code-Execution.html https://security.gentoo.org/glsa/201702-20 http://rhn.redhat.com/errata/RHSA-2017-0057.html https://access.redhat.com/errata/RHSA-2017:0057 https://nvd.nist.gov https://www.exploit-db.com/exploits/41012/

CVE-2017-2930

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect