CVE-2017-11213Out-of-bounds Read in Adobe Flash Player

CWE-125Out-of-bounds Read7 documents7 sources
Severity
9.8CRITICALNVD
EPSS
11.4%
top 6.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 9
Latest updateMay 13

Description

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer due to an integer overflow; the computation is part of the abstraction that creates an arbitrarily sized transparent or opaque bitmap image. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Patches

🔴Vulnerability Details

3
GHSA
GHSA-6hvr-vx96-6xm3: An issue was discovered in Adobe Flash Player 272022-05-13
OSV
CVE-2017-11213: An issue was discovered in Adobe Flash Player 272017-12-09
CVEList
CVE-2017-11213: An issue was discovered in Adobe Flash Player 272017-12-09

📋Vendor Advisories

1
Red Hat
flash-plugin: multiple code execution issues fixed in APSB17-332017-11-14

🕵️Threat Intelligence

1
Zscaler
Zscaler protects against 40 new vulnerabilities for Adobe Fl

💬Community

1
Bugzilla
CVE-2017-11213 CVE-2017-11215 CVE-2017-11225 CVE-2017-3112 CVE-2017-3114 flash-plugin: multiple code execution issues fixed in APSB17-332017-11-14
CVE-2017-11213 — Out-of-bounds Read in Adobe | cvebase