CVE-2017-2927
published 2017-01-11CVE-2017-2927: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files. Successful…
PriorityP349high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
8.86%
94.6th percentile
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | flash_player | <= 24.0.0.186 | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv8.8HIGH
vendor_redhat8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-c239-qf7q-p29h: Adobe Flash Player versions 24
ghsa_unreviewed·2022-05-14
CVE-2017-2927 [CRITICAL] CWE-119 GHSA-c239-qf7q-p29h: Adobe Flash Player versions 24
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution.
OSV
CVE-2017-2927: Adobe Flash Player versions 24
osv·2017-01-11·CVSS 8.8
CVE-2017-2927 [HIGH] CVE-2017-2927: Adobe Flash Player versions 24
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution.
Red Hat
flash-plugin: multiple code execution issues fixed in APSB17-02
vendor_redhat·2017-01-10·CVSS 8.8
CVE-2017-2927 [HIGH] flash-plugin: multiple code execution issues fixed in APSB17-02
flash-plugin: multiple code execution issues fixed in APSB17-02
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution.
Package: flash-plugin (Red Hat Enterprise Linux 5) - Will not fix
No detection rules found.
No public exploits indexed.
Fortinet
Fortinet Security Researcher Discovers Two Critical Vulnerabilities in Adobe Flash Player
blogs_fortinet·2017-01-17·CVSS 8.8
CVE-2017-2926 [HIGH] Fortinet Security Researcher Discovers Two Critical Vulnerabilities in Adobe Flash Player
FORTIGUARD LABS THREAT RESEARCH
Fortinet Security Researcher Discovers Two Critical Vulnerabilities in Adobe Flash Player
By Kai Lu | January 17, 2017
Fortinet security researcher Kai Lu discovered and reported two critical zero-day vulnerabilities in Adobe Flash Player in November 2016. Adobe identified them as CVE-2017-2926 and CVE-2017-2927 and released a patch to fix them on January 10, 2017. Here is a brief summary of each of these detected vulnerabilities.
CVE-2017-2926
This is a memory corruption vulnerability found in Flash Player’s engine when processing MP4 files. Specifically, the vulnerability is caused by a MP4 file with a crafted sample size in the MP4 atom specification that causes an out of bounds memory access, which sometimes triggers an access violation exception.
A
Bugzilla
CVE-2017-15100 foreman: Stored XSS in fact name or value
bugzilla·2017-11-01·CVSS 6.1
CVE-2017-15100 [MEDIUM] CVE-2017-15100 foreman: Stored XSS in fact name or value
CVE-2017-15100 foreman: Stored XSS in fact name or value
A cross-site scripting vulnerability was found in foreman in pages where facts are submitted through insertion of HTML in its name or value.
Upstream bug:
http://projects.theforeman.org/issues/21519
Discussion:
Statement:
This issue affects the versions of foreman as shipped with Red Hat Satellite version 6 and Ceph Storage version 1.3. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.
---
This issue has been addressed in the following products:
Red Hat Satellite 6.4 for RHEL 7
Via RHSA-2018:2927 https://access.redhat.com/e
Bugzilla
CVE-2017-12175 Satellite 6: XSS in discovery rule filter autocomplete functionality
bugzilla·2017-10-05·CVSS 3.5
CVE-2017-12175 [LOW] CVE-2017-12175 Satellite 6: XSS in discovery rule filter autocomplete functionality
CVE-2017-12175 Satellite 6: XSS in discovery rule filter autocomplete functionality
Jan Hutař of Red Hat reports:
There is a XSS possible in discovery rule when you are entering filter and you use autocomplete functionality
Version-Release number of selected component (if applicable):
satellite-6.3.0-18.0.beta.el7sat.noarch
Discussion:
Created redmine issue http://projects.theforeman.org/issues/22042 from this bug
---
Created attachment 1482812
Verified XSS
---
This issue has been addressed in the following products:
Red Hat Satellite 6.4 for RHEL 7
Via RHSA-2018:2927 https://access.redhat.com/errata/RHSA-2018:2927
Bugzilla
CVE-2017-2925 CVE-2017-2926 CVE-2017-2927 CVE-2017-2928 CVE-2017-2930 CVE-2017-2931 CVE-2017-2932 CVE-2017-2933 CVE-2017-2934 CVE-2017-2935 CVE-2017-2936 CVE-2017-2937 CVE-2017-2938 flash-plugin: mult
bugzilla·2017-01-10·CVSS 8.8
CVE-2017-2925 [HIGH] CVE-2017-2925 CVE-2017-2926 CVE-2017-2927 CVE-2017-2928 CVE-2017-2930 CVE-2017-2931 CVE-2017-2932 CVE-2017-2933 CVE-2017-2934 CVE-2017-2935 CVE-2017-2936 CVE-2017-2937 CVE-2017-2938 flash-plugin: mult
CVE-2017-2925 CVE-2017-2926 CVE-2017-2927 CVE-2017-2928 CVE-2017-2930 CVE-2017-2931 CVE-2017-2932 CVE-2017-2933 CVE-2017-2934 CVE-2017-2935 CVE-2017-2936 CVE-2017-2937 CVE-2017-2938 flash-plugin: multiple code execution issues fixed in APSB17-02
Adobe Security Bulletin APSB17-02 for Adobe Flash Player describes multiple flaws that can possibly lead to code execution when Flash Player is used to play a specially crafted SWF file.
Quoting from the APSB17-02:
These updates resolve a security bypass vulnerability that could lead to information disclosure (CVE-2017-2938).
These updates resolve use-after-free vulnerabilities that could lead to code execution (CVE-2017-2932, CVE-2017-2936, CVE-2017-2937).
These updates resolve heap buffer overflow vulnerabilities that could lead to code exec
http://rhn.redhat.com/errata/RHSA-2017-0057.htmlhttp://www.securityfocus.com/bid/95347http://www.securitytracker.com/id/1037570https://helpx.adobe.com/security/products/flash-player/apsb17-02.htmlhttps://security.gentoo.org/glsa/201702-20http://rhn.redhat.com/errata/RHSA-2017-0057.htmlhttp://www.securityfocus.com/bid/95347http://www.securitytracker.com/id/1037570https://helpx.adobe.com/security/products/flash-player/apsb17-02.htmlhttps://security.gentoo.org/glsa/201702-20
2017-01-11
Published