CVE-2017-3114Out-of-bounds Read in Adobe Flash Player

CWE-125Out-of-bounds Read7 documents7 sources
Severity
9.8CRITICALNVD
EPSS
9.7%
top 7.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 9
Latest updateMay 13

Description

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of providing language- and region- or country- specific functionality. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Patches

🔴Vulnerability Details

3
GHSA
GHSA-22qw-3g47-hgw6: An issue was discovered in Adobe Flash Player 272022-05-13
CVEList
CVE-2017-3114: An issue was discovered in Adobe Flash Player 272017-12-09
OSV
CVE-2017-3114: An issue was discovered in Adobe Flash Player 272017-12-09

📋Vendor Advisories

1
Red Hat
flash-plugin: multiple code execution issues fixed in APSB17-332017-11-14

🕵️Threat Intelligence

1
Zscaler
Zscaler protects against 40 new vulnerabilities for Adobe Fl

💬Community

1
Bugzilla
CVE-2017-11213 CVE-2017-11215 CVE-2017-11225 CVE-2017-3112 CVE-2017-3114 flash-plugin: multiple code execution issues fixed in APSB17-332017-11-14