Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10993
HistoryApr 11, 2017 - 12:00 a.m.

KLA10993 Arbitrary code execution vulnerabilities in Adobe Flash Player

2017-04-1100:00:00
Kaspersky Lab
threats.kaspersky.com
23

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.03 Low

EPSS

Percentile

90.7%

JSON

Detect date:

04/11/2017

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitary code.

Affected products:

Adobe Flash Player versions earlier than 25.0.0.148

Solution:

Update to the latest version
Download Adobe Flash Player

Original advisories:

Adobe security bulletin

Impacts:

ACE

Related products:

Adobe Flash Player ActiveX

CVE-IDS:

CVE-2017-30589.3Critical
CVE-2017-30649.3Critical

Exploitation:

Public exploits exist for this vulnerability.

Related

prion 2
ubuntucve 2
cve 2
checkpoint_advisories 2
zdi 1
zdt 1
nessus 7
redhatcve 7
suse 1
redhat 1
openvas 8
mscve 1
mageia 1
gentoo 1
trendmicroblog 1
prion
prion
Design/Logic Flaw
2017-04-12 14:59:00
Memory corruption
2017-04-12 14:59:00
ubuntucve
ubuntucve
CVE-2017-3058
2017-04-12 00:00:00
CVE-2017-3064
2017-04-12 00:00:00
cve
cve
CVE-2017-3058
2017-04-12 14:59:00
CVE-2017-3064
2017-04-12 14:59:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Use After Free Code Execution (APSB17-10: CVE-2017-3058)
2017-04-09 00:00:00
Adobe Flash Player Memory Corruption (APSB17-10: CVE-2017-3064)
2017-04-24 00:00:00
zdi
zdi
Adobe Flash ByteArray Use-After-Free Remote Code Execution Vulnerability
2017-04-11 00:00:00
zdt
zdt
Adobe Flash - Out-of-Bounds Read in Getting TextField Width Exploit
2017-05-17 00:00:00
nessus
nessus
RHEL 6 : flash-plugin (RHSA-2017:0934)
2017-04-13 00:00:00
KB4018483: Security update for Adobe Flash Player (April 2017)
2017-04-11 00:00:00
GLSA-201704-04 : Adobe Flash Player: Multiple vulnerabilities
2017-04-27 00:00:00
redhatcve
redhatcve
CVE-2017-3061
2017-04-11 16:18:33
CVE-2017-3058
2017-04-11 16:18:46
CVE-2017-3062
2017-04-11 16:18:16
suse
suse
Security update for flash-player (important)
2017-04-12 18:12:20
redhat
redhat
(RHSA-2017:0934) Critical: flash-plugin security update
2017-04-12 11:31:40
openvas
openvas
Mageia: Security Advisory (MGASA-2017-0114)
2022-01-28 00:00:00
Adobe Flash Player Within Google Chrome Security Update (APSB17-07) - Mac OS X
2017-04-12 00:00:00
Adobe Flash Player Security Update (APSB17-10) - Windows
2017-04-12 00:00:00
mscve
mscve
April 2017 Adobe Flash Security Update
2017-04-11 07:00:00
mageia
mageia
Updated flash-player-plugin package fixes security vulnerability
2017-04-21 10:24:22
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2017-04-27 00:00:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of April 17, 2017
2017-04-21 18:23:45

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.03 Low

EPSS

Percentile

90.7%

JSON
Related for KLA10993
prion2ubuntucve2cve2checkpoint_advisories2zdi1zdt1nessus7redhatcve7suse1redhat1openvas8mscve1mageia1gentoo1trendmicroblog1