PT-2017-3413 · Adobe+2 · Flash Player+2

Publicado

2017-11-14

·

Atualizado

2021-09-08

·

CVE-2017-3112

CVSS v2.0

10

Crítica

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 27.0.0.183 and earlier
Description The issue occurs due to a computation that reads data past the end of the target buffer, specifically in the AdobePSDK metadata. This happens because of an invalid pointer offset used during access of internal data structure fields. A successful attack can lead to sensitive data exposure. The vulnerability can also allow a remote attacker to execute arbitrary code.
Recommendations For Adobe Flash Player versions 27.0.0.183 and earlier, update to a version later than 27.0.0.183 to resolve the issue. As a temporary workaround, consider restricting access to AdobePSDK metadata until a patch is available.

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2017-2836
ALT-PU-2018-2414
BDU:2018-00201
CVE-2017-3112
MGASA-2017-0410
RHSA-2017:3222
RHSA-2017_3222
ZDI-17-996

Produtos afetados

Alt Linux
Flash Player
Red Hat