PT-2017-3425 · Adobe+3 · Flash Player+3
Publicado
2017-11-14
·
Atualizado
2024-06-15
·
CVE-2017-11215
CVSS v3.1
10
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Adobe Flash Player versions 27.0.0.183 and earlier
Description
The issue is related to a use after free vulnerability in the Primetime SDK of Adobe Flash Player. This vulnerability can provide an attacker with unintended memory access, potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution. The vulnerability is associated with the mismatch between an old and a new object.
Recommendations
For Adobe Flash Player versions 27.0.0.183 and earlier, update to a version later than 27.0.0.183 to resolve the issue. As a temporary workaround, consider disabling the Primetime SDK functionality until a patch is available. Restrict access to the vulnerable components to minimize the risk of exploitation.
Correção
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Flash Player
Red Hat
Suse