Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2017-11225
HistoryDec 09, 2017 - 12:00 a.m.

CVE-2017-11225

2017-12-0900:00:00
ubuntu.com
ubuntu.com
10

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

86.6%

JSON

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier
versions. This vulnerability is an instance of a use after free
vulnerability in the Primetime SDK metadata functionality. The mismatch
between an old and a new object can provide an attacker with unintended
memory access – potentially leading to code corruption, control-flow
hijack, or an information leak attack. Successful exploitation could lead
to arbitrary code execution.

OSVersionArchitecturePackageVersionFilename
ubuntu17.10noarchadobe-flashplugin< 1:20171114.1-0ubuntu0.17.10.1UNKNOWN
ubuntu14.04noarchadobe-flashplugin< 1:20171114.1-0ubuntu0.14.04.1UNKNOWN
ubuntu16.04noarchadobe-flashplugin< 1:20171114.1-0ubuntu0.16.04.1UNKNOWN
ubuntu17.04noarchadobe-flashplugin< 1:20171114.1-0ubuntu0.17.04.1UNKNOWN
ubuntu17.10noarchflashplugin-nonfree< 27.0.0.187ubuntu0.17.10.1UNKNOWN
ubuntu14.04noarchflashplugin-nonfree< 27.0.0.187ubuntu0.14.04.1UNKNOWN
ubuntu16.04noarchflashplugin-nonfree< 27.0.0.187ubuntu0.16.04.1UNKNOWN
ubuntu17.04noarchflashplugin-nonfree< 27.0.0.187ubuntu0.17.04.1UNKNOWN

Related

checkpoint_advisories 1
prion 1
cve 2
redhatcve 6
archlinux 2
mageia 2
freebsd 2
openvas 10
nessus 11
redhat 1
gentoo 1
mscve 1
threatpost 1
suse 3
chrome 1
trendmicroblog 1
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Use After Free (APSB17-33: CVE-2017-11225)
2017-11-14 00:00:00
prion
prion
Design/Logic Flaw
2017-12-09 06:29:00
cve
cve
CVE-2017-11225
2017-12-09 06:29:00
CVE-2018-6059
2021-11-02 21:15:00
redhatcve
redhatcve
CVE-2018-6059
2018-03-07 08:52:22
CVE-2017-11225
2017-11-14 19:49:53
CVE-2017-3114
2017-11-14 19:50:48
archlinux
archlinux
[ASA-201711-22] lib32-flashplugin: arbitrary code execution
2017-11-15 00:00:00
[ASA-201711-21] flashplugin: arbitrary code execution
2017-11-15 00:00:00
mageia
mageia
Updated flash-player-plugin packages fixes security vulnerabilities
2017-11-16 10:39:32
Updated chromium-browser-stable packages fix security vulnerabilities
2018-06-04 18:11:47
freebsd
freebsd
Flash Player -- multiple vulnerabilities
2017-11-14 00:00:00
chromium -- vulnerability
2016-05-03 00:00:00
openvas
openvas
Adobe Flash Player Within Google Chrome Security Update (APSB17-33) - Mac OS X
2017-11-15 00:00:00
Adobe Flash Player Security Update (APSB17-33) - Windows
2017-11-15 00:00:00
Adobe Flash Player Security Update (APSB17-33) - Linux
2017-11-15 00:00:00
nessus
nessus
GLSA-201711-13 : Adobe Flash Player: Multiple vulnerabilities
2017-11-20 00:00:00
Adobe Flash Player <= 27.0.0.183 (APSB17-33)
2017-11-14 00:00:00
FreeBSD : Flash Player -- multiple vulnerabilities (52f10525-caff-11e7-b590-6451062f0f7a)
2017-11-17 00:00:00
redhat
redhat
(RHSA-2017:3222) Critical: flash-plugin security update
2017-11-15 10:26:05
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2017-11-19 00:00:00
mscve
mscve
November 2017 Adobe Flash Security Update
2017-11-14 08:00:00
threatpost
threatpost
Adobe Patches Flash Player, 56 Bugs in Reader and Acrobat
2017-11-14 12:14:00
suse
suse
Security update for Chromium (important)
2018-03-16 12:07:04
Security update for Chromium (important)
2018-05-09 15:07:28
Security update for Chromium (important)
2018-05-27 18:06:43
chrome
chrome
Stable Channel Update for Desktop
2018-03-06 00:00:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of November 20, 2017
2017-11-22 14:10:15

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

86.6%

JSON
Related for UB:CVE-2017-11225
checkpoint_advisories1prion1cve2redhatcve6archlinux2mageia2freebsd2openvas10nessus11redhat1gentoo1mscve1threatpost1suse3chrome1trendmicroblog1