Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2017-11215
HistoryDec 09, 2017 - 12:00 a.m.

CVE-2017-11215

2017-12-0900:00:00
ubuntu.com
ubuntu.com
14

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

86.6%

JSON

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier
versions. This vulnerability is an instance of a use after free
vulnerability in the Primetime SDK. The mismatch between an old and a new
object can provide an attacker with unintended memory access – potentially
leading to code corruption, control-flow hijack, or an information leak
attack. Successful exploitation could lead to arbitrary code execution.

OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchadobe-flashplugin< 1:20171114.1-0ubuntu0.17.10.1UNKNOWN
ubuntu14.04noarchadobe-flashplugin< 1:20171114.1-0ubuntu0.14.04.1UNKNOWN
ubuntu16.04noarchadobe-flashplugin< 1:20171114.1-0ubuntu0.16.04.1UNKNOWN
ubuntu17.04noarchadobe-flashplugin< 1:20171114.1-0ubuntu0.17.04.1UNKNOWN
ubuntu17.10noarchflashplugin-nonfree< 27.0.0.187ubuntu0.17.10.1UNKNOWN
ubuntu14.04noarchflashplugin-nonfree< 27.0.0.187ubuntu0.14.04.1UNKNOWN
ubuntu16.04noarchflashplugin-nonfree< 27.0.0.187ubuntu0.16.04.1UNKNOWN
ubuntu17.04noarchflashplugin-nonfree< 27.0.0.187ubuntu0.17.04.1UNKNOWN

Related

prion 1
cve 2
checkpoint_advisories 1
redhatcve 6
mageia 2
archlinux 2
openvas 10
freebsd 2
threatpost 1
nessus 11
gentoo 1
mscve 1
redhat 1
suse 3
chrome 1
trendmicroblog 1
prion
prion
Design/Logic Flaw
2017-12-09 06:29:00
cve
cve
CVE-2017-11215
2017-12-09 06:29:00
CVE-2018-6058
2021-11-02 21:15:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Use After Free (APSB17-33: CVE-2017-11215)
2017-11-14 00:00:00
redhatcve
redhatcve
CVE-2018-6058
2018-03-07 08:52:37
CVE-2017-11225
2017-11-14 19:49:53
CVE-2017-3112
2017-11-14 19:50:29
mageia
mageia
Updated flash-player-plugin packages fixes security vulnerabilities
2017-11-16 10:39:32
Updated chromium-browser-stable packages fix security vulnerabilities
2018-06-04 18:11:47
archlinux
archlinux
[ASA-201711-22] lib32-flashplugin: arbitrary code execution
2017-11-15 00:00:00
[ASA-201711-21] flashplugin: arbitrary code execution
2017-11-15 00:00:00
openvas
openvas
Adobe Flash Player Within Google Chrome Security Update (APSB17-33) - Mac OS X
2017-11-15 00:00:00
Adobe Flash Player Within Google Chrome Security Update (APSB17-33) - Linux
2017-11-15 00:00:00
Microsoft IE And Microsoft Edge Multiple Flash Player Vulnerabilities (4048951)
2017-11-15 00:00:00
freebsd
freebsd
Flash Player -- multiple vulnerabilities
2017-11-14 00:00:00
chromium -- vulnerability
2016-05-03 00:00:00
threatpost
threatpost
Adobe Patches Flash Player, 56 Bugs in Reader and Acrobat
2017-11-14 12:14:00
nessus
nessus
FreeBSD : Flash Player -- multiple vulnerabilities (52f10525-caff-11e7-b590-6451062f0f7a)
2017-11-17 00:00:00
KB4048951: Security update for Adobe Flash Player (November 2017)
2017-11-14 00:00:00
RHEL 6 : flash-plugin (RHSA-2017:3222)
2017-11-16 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2017-11-19 00:00:00
mscve
mscve
November 2017 Adobe Flash Security Update
2017-11-14 08:00:00
redhat
redhat
(RHSA-2017:3222) Critical: flash-plugin security update
2017-11-15 10:26:05
suse
suse
Security update for Chromium (important)
2018-03-16 12:07:04
Security update for Chromium (important)
2018-05-09 15:07:28
Security update for Chromium (important)
2018-05-27 18:06:43
chrome
chrome
Stable Channel Update for Desktop
2018-03-06 00:00:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of November 20, 2017
2017-11-22 14:10:15

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

86.6%

JSON
Related for UB:CVE-2017-11215
prion1cve2checkpoint_advisories1redhatcve6mageia2archlinux2openvas10freebsd2threatpost1nessus11gentoo1mscve1redhat1suse3chrome1trendmicroblog1