CVE-2017-3086
published 2017-06-20CVE-2017-3086: Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code…
PriorityP344critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
6.88%
93.3th percentile
Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | shockwave_player | <= 12.2.8.198 | — |
| apache | hadoop | — | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_apache9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6mqw-4pq7-h9fp: Adobe Shockwave versions 12
ghsa_unreviewed·2022-05-17
CVE-2017-3086 [CRITICAL] CWE-119 GHSA-6mqw-4pq7-h9fp: Adobe Shockwave versions 12
Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Apache
Apache hadoop: CVE-2017-15718
vendor_apache·CVSS 9.8
CVE-2017-15718 [CRITICAL] Apache hadoop: CVE-2017-15718
Apache hadoop: CVE-2017-15718
In Apache Hadoop 2.7.3 and 2.7.4, the security fix for CVE-2016-3086 is incomplete. The YARN NodeManager can leak the password for credential store provider used by the NodeManager to YARN Applications. If you use the CredentialProvider feature to encrypt passwords used in NodeManager configs, it may be possible for any Container launched by that NodeManager to gain access to the encryption password. The other passwords themselves are not directly exposed.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/99019http://www.securitytracker.com/id/1038656https://fortiguard.com/zeroday/FG-VD-16-036https://helpx.adobe.com/security/products/shockwave/apsb17-18.htmlhttp://www.securityfocus.com/bid/99019http://www.securitytracker.com/id/1038656https://fortiguard.com/zeroday/FG-VD-16-036https://helpx.adobe.com/security/products/shockwave/apsb17-18.html
2017-06-20
Published