CVE-2017-11305 — Adobe Flash Player vulnerability

6 documents6 sources
Severity
6.5MEDIUMNVD
EPSS
2.5%
top 14.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Adobe Flash PlayerAdobe Flash Player Desktop RuntimeRedhat Enterprise Linux Desktop+2 more
Timeline
PublishedDec 13
Latest updateMay 13

Description

A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended reset of the global settings preference file when a user clears browser data.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages5 packages

▶NVDadobe/flash_player27.0.0.187

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-6f97-qc4g-xrjj: A regression affecting Adobe Flash Player version 27↗2022-05-13
▶
CVEList
CVE-2017-11305: A regression affecting Adobe Flash Player version 27↗2017-12-13
▶
OSV
CVE-2017-11305: A regression affecting Adobe Flash Player version 27↗2017-12-13
▶

📋Vendor Advisories

1
Red Hat
flash-plugin: unintended reset of global settings preference file vulnerability (APSB17-42)↗2017-12-12
▶

💬Community

1
Bugzilla
CVE-2017-11305 flash-plugin: unintended reset of global settings preference file vulnerability (APSB17-42)↗2017-12-13
▶
CVE-2017-11305 — Adobe Flash Player vulnerability | cvebase