Published: 09/12/2017 Updated: 08/09/2021

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Subscribe to Enterprise Linux Workstation

An issue exists in Adobe Flash Player 27.0.0.183 and previous versions versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of providing language- and region- or country- specific functionality. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise linux workstation 6.0
redhat enterprise linux server 6.0
redhat enterprise linux desktop 6.0
adobe flash_player

Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An update for flash-plugin is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Critical A Common Vulnerability Scoring Syst ...

An issue was discovered in Adobe Flash Player 2700183 and earlier versions This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of providing language- and region- or country- specific functionality The use of an invalid (out-of-range) pointer offset during acc ...

An out-of-bounds access vulnerability has been discovered in flashplugin before 2700187 leading to arbitrary code execution when playing a specially crafted SWF file ...

CWE-125 https://helpx.adobe.com/security/products/flash-player/apsb17-33.html https://security.gentoo.org/glsa/201711-13 https://access.redhat.com/errata/RHSA-2017:3222 http://www.securitytracker.com/id/1039778 http://www.securityfocus.com/bid/101837 https://access.redhat.com/errata/RHSA-2017:3222 https://nvd.nist.gov https://security.archlinux.org/CVE-2017-3114

CVE-2017-3114

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect