CVE-2017-11215

Published: Dic 09, 2017 Last Modified: Apr 20, 2025 EU-VD ID: EUVD-2017-2849 Aliases: GSD-2017-11215

ExploitDB:

Other exploit source:

Google Dorks:

CRITICAL 9,8

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: high

HIGH 10,0

Source: [email protected]

Access Vector: network

Access Complexity: low

Authentication: none

Confidentiality: complete

Integrity: complete

Availability: complete

Description

AI Translation Available

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score

0,0582

Percentile

0,9th

Updated

EPSS Score Trend (Last 90 Days)

416

Use After Free

Stable

Abstraction: Variant Structure: Simple

Common Consequences

Security Scopes Affected:

Integrity Availability Confidentiality

Potential Impacts:

Modify Memory Dos: Crash, Exit, Or Restart Execute Unauthorized Code Or Commands

Applicable Platforms

Languages: C, C++, Memory-Unsafe

Likelihood of Exploit: High

View CWE Details

Application

Flash Player by Adobe

Product Information

Vendor Adobe

Product Flash Player

Version Range Affected

To 27.0.0.183 (inclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Enterprise Linux Server by Redhat

Product Information

Vendor Redhat

Product Enterprise Linux Server

Version 6.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Flash Player by Adobe

Product Information

Vendor Adobe

Product Flash Player

Version Range Affected

To 27.0.0.183 (inclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:adobe:flash_player:*:*:*:*:*:intenet_explorer_11:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Flash Player by Adobe

Product Information

Vendor Adobe

Product Flash Player

Version Range Affected

To 27.0.0.183 (inclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Enterprise Linux Workstation by Redhat

Product Information

Vendor Redhat

Product Enterprise Linux Workstation

Version 6.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Flash Player by Adobe

Product Information

Vendor Adobe

Product Flash Player

Version Range Affected

To 27.0.0.183 (inclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Enterprise Linux Desktop by Redhat

Product Information

Vendor Redhat

Product Enterprise Linux Desktop

Version 6.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

https://access.redhat.com/errata/RHSA-2017:3222