CVE-2017-2986
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD
Description
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec. Successful exploitation could lead to arbitrary code execution.
Affected (4)
Products: Adobe: Flash Player, Flash Player Desktop Runtime
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 24.0.0.194 |
| Running on/with | Platform Versions |
|---|---|
Google Chrome Os | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 24.0.0.194 |
| Running on/with | Platform Versions |
|---|---|
Microsoft Windows 10 | All versions |
Microsoft Windows 8.1 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 24.0.0.194 |
| Running on/with | Platform Versions |
|---|---|
Apple Mac Os X | All versions |
Linux Linux Kernel | All versions |
Microsoft Windows | All versions |
References (12)
Source: psirt@adobe.com
Broken LinkThird Party AdvisoryVDB Entry
Source: psirt@adobe.com
Broken LinkThird Party AdvisoryVDB Entry
Source: psirt@adobe.com
PatchVendor Advisory
Source: psirt@adobe.com
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry
Timeline
No history available yet.