CVE-2017-3112

Published: Dic 09, 2017 Last Modified: Apr 20, 2025

ExploitDB:

Other exploit source:

Google Dorks:

CRITICAL 9,8

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: high

HIGH 10,0

Source: [email protected]

Access Vector: network

Access Complexity: low

Authentication: none

Confidentiality: complete

Integrity: complete

Availability: complete

Description

AI Translation Available

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of AdobePSDK metadata. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score

0,0968

Percentile

0,9th

Updated

EPSS Score Trend (Last 90 Days)

125

Out-of-bounds Read

Draft

Abstraction: Base Structure: Simple

Common Consequences

Security Scopes Affected:

Confidentiality Availability Other

Potential Impacts:

Read Memory Bypass Protection Mechanism Dos: Crash, Exit, Or Restart Varies By Context

Applicable Platforms

Languages: C, C++, Memory-Unsafe

Technologies: ICS/OT

View CWE Details

Application

Flash Player by Adobe

Product Information

Vendor Adobe

Product Flash Player

Version Range Affected

To 27.0.0.183 (inclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Flash Player by Adobe

Product Information

Vendor Adobe

Product Flash Player

Version Range Affected

To 27.0.0.183 (inclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer_11:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Enterprise Linux Server by Redhat

Product Information

Vendor Redhat

Product Enterprise Linux Server

Version 6.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Flash Player by Adobe

Product Information

Vendor Adobe

Product Flash Player

Version Range Affected

To 27.0.0.183 (inclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Enterprise Linux Workstation by Redhat

Product Information

Vendor Redhat

Product Enterprise Linux Workstation

Version 6.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Application

Flash Player by Adobe

Product Information

Vendor Adobe

Product Flash Player

Version Range Affected

To 27.0.0.183 (inclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Enterprise Linux Desktop by Redhat

Product Information

Vendor Redhat

Product Enterprise Linux Desktop

Version 6.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

https://access.redhat.com/errata/RHSA-2017:3222