CVE-2017-2998 in Flash Player

Tóm tắt

Bởi MITRE

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions. Successful exploitation could lead to arbitrary code execution.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Đặt trước: 02/12/2016
• Tiết lộ: 14/03/2017
• Kiểm duyệt: được chấp nhận
• mục: VDB-97942
• CPE: sẵn sàng
• CWE: CWE-119 (Đã xác nhận)
• CVSS: 9.8 (NVD)
• EPSS: 0.04066
• KEV: không
• Các hoạt động: rất thấp
• ngành: Lawfirm, Education, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-2998
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-2998
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-2998/