Severity
9.8CRITICALNVD
EPSS
9.7%
top 7.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 9
Latest updateMay 13

Description

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of AdobePSDK metadata. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Patches

🔴Vulnerability Details

3
GHSA
GHSA-qm8j-pmc4-xr8w: An issue was discovered in Adobe Flash Player 272022-05-13
CVEList
CVE-2017-3112: An issue was discovered in Adobe Flash Player 272017-12-09
OSV
CVE-2017-3112: An issue was discovered in Adobe Flash Player 272017-12-09

📋Vendor Advisories

21
Red Hat
flash-plugin: multiple code execution issues fixed in APSB17-332017-11-14
Red Hat
chromium-browser: url spoofing in omnibox2017-07-25
Red Hat
chromium-browser: type confusion in pdfium2017-07-25
Red Hat
chromium-browser: use after free in ppapi2017-07-25
Red Hat
chromium-browser: ui spoofing in blink2017-07-25

🕵️Threat Intelligence

3
Talos
Vulnerability Spotlight: Google PDFium Tiff Code Execution2017-10-19
Talos
Vulnerability Spotlight: Google PDFium Tiff Code Execution2017-10-19
Zscaler
Zscaler protects against 40 new vulnerabilities for Adobe Fl

💬Community

1
Bugzilla
CVE-2017-11213 CVE-2017-11215 CVE-2017-11225 CVE-2017-3112 CVE-2017-3114 flash-plugin: multiple code execution issues fixed in APSB17-332017-11-14