Adobe Flash Player Within Google Chrome Security Update (APSB17-42) - Windows
🗓️ 13 Dec 2017 00:00:00Reported by Copyright (C) 2017 Greenbone AGType
openvas🔗 plugins.openvas.org👁 39 Views
| Reporter | Title | Published | Views | Family All 57 |
|---|---|---|---|---|
| Flash Player < 28.0.0.126 Business Logic Error (APSB17-42) | 20 Mar 201900:00 | – | nessus | |
| Adobe Flash Player <= 27.0.0.187 (APSB17-42) | 12 Dec 201700:00 | – | nessus | |
| Adobe Flash Player for Mac <= 27.0.0.187 (APSB17-42) | 12 Dec 201700:00 | – | nessus | |
| RHEL 6 : flash-plugin (RHSA-2018:0081) | 11 Jan 201800:00 | – | nessus | |
| KB4053577: Security update for Adobe Flash Player (December 2017) | 12 Dec 201700:00 | – | nessus | |
| CVE-2017-11305 | 26 Jul 202607:01 | – | circl | |
| Adobe Flash Player Unauthorized Operation Vulnerability | 18 Dec 201700:00 | – | cnvd | |
| CVE-2017-11305 | 13 Dec 201721:00 | – | cve | |
| CVE-2017-11305 | 13 Dec 201721:00 | – | cvelist | |
| EUVD-2017-2939 | 7 Oct 202500:30 | – | euvd |
10
# SPDX-FileCopyrightText: 2017 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
CPE = "cpe:/a:adobe:flash_player_chrome";
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.812253");
script_version("2025-09-12T05:38:45+0000");
script_cve_id("CVE-2017-11305");
script_tag(name:"cvss_base", value:"4.3");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:N/I:P/A:N");
script_tag(name:"last_modification", value:"2025-09-12 05:38:45 +0000 (Fri, 12 Sep 2025)");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2023-01-27 19:24:00 +0000 (Fri, 27 Jan 2023)");
script_tag(name:"creation_date", value:"2017-12-13 12:57:31 +0530 (Wed, 13 Dec 2017)");
script_name("Adobe Flash Player Within Google Chrome Security Update (APSB17-42) - Windows");
script_tag(name:"summary", value:"Adobe Flash Player is prone to multiple vulnerabilities.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");
script_tag(name:"insight", value:"The Flaw exists due to a logic error may
cause the global settings preference file to be reset.");
script_tag(name:"impact", value:"Successful exploitation of this
vulnerability will allow remote attackers to conduct unintended reset of
global settings preference file.");
script_tag(name:"affected", value:"Adobe Flash Player prior to 28.0.0.126
within Google Chrome on Windows.");
script_tag(name:"solution", value:"Upgrade to Adobe Flash Player for
Google Chrome 28.0.0.126, or later.");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"executable_version");
script_xref(name:"URL", value:"https://helpx.adobe.com/security/products/flash-player/apsb17-42.html");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2017 Greenbone AG");
script_family("General");
script_dependencies("gb_flash_player_within_google_chrome_detect_win.nasl");
script_mandatory_keys("AdobeFlashPlayer/Chrome/Win/Ver");
exit(0);
}
include("host_details.inc");
include("version_func.inc");
if(!infos = get_app_version_and_location(cpe:CPE, exit_no_version:TRUE))
exit(0);
vers = infos["version"];
path = infos["location"];
if(version_is_less(version:vers, test_version:"28.0.0.126")) {
report = report_fixed_ver(installed_version:vers, fixed_version:"28.0.0.126", install_path:path);
security_message(port:0, data:report);
exit(0);
}
exit(99);
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
12 Sep 2025 00:00Current
8.1High risk
Vulners AI Score8.1
CVSS 24.3
CVSS 3.16.5
EPSS0.03642