8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.03 Low
EPSS
Percentile
90.8%
Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode
verification procedure, which allows for an untrusted value to be used in
the calculation of an array index. This can lead to type confusion, and
successful exploitation could lead to arbitrary code execution.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 17.10 | noarch | adobe-flashplugin | < 1:20171016.1-0ubuntu1 | UNKNOWN |
ubuntu | 14.04 | noarch | adobe-flashplugin | < 1:20171016.1-0ubuntu0.14.04.1 | UNKNOWN |
ubuntu | 16.04 | noarch | adobe-flashplugin | < 1:20171016.1-0ubuntu0.16.04.1 | UNKNOWN |
ubuntu | 17.04 | noarch | adobe-flashplugin | < 1:20171016.1-0ubuntu0.17.04.1 | UNKNOWN |
ubuntu | 17.10 | noarch | flashplugin-nonfree | < 27.0.0.170ubuntu1 | UNKNOWN |
ubuntu | 14.04 | noarch | flashplugin-nonfree | < 27.0.0.170ubuntu0.14.04.1 | UNKNOWN |
ubuntu | 16.04 | noarch | flashplugin-nonfree | < 27.0.0.170ubuntu0.16.04.1 | UNKNOWN |
ubuntu | 17.04 | noarch | flashplugin-nonfree | < 27.0.0.170ubuntu0.17.04.1 | UNKNOWN |
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.03 Low
EPSS
Percentile
90.8%