Description (CNA)
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Adobe Flash Player 26.0.0.151 and earlier versions | affected Adobe Flash Player 26.0.0.151 and earlier versions |
CWE
No CWE identifiers supplied.
References
- http://packetstormsecurity.com/files/144332/Adobe-Flash-appleToRange-Out-Of-Bounds-Read.html
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1323
- http://www.securityfocus.com/bid/100716
- https://www.youtube.com/watch?v=6iZnIQbRf5M
- https://security.gentoo.org/glsa/201709-16
- https://www.exploit-db.com/exploits/42783/
- https://helpx.adobe.com/security/products/flash-player/apsb17-28.html
- https://access.redhat.com/errata/RHSA-2017:2702
- http://www.securitytracker.com/id/1039314
ADP enrichment
No English description supplied.
- http://packetstormsecurity.com/files/144332/Adobe-Flash-appleToRange-Out-Of-Bounds-Read.html
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1323
- http://www.securityfocus.com/bid/100716
- https://www.youtube.com/watch?v=6iZnIQbRf5M
- https://security.gentoo.org/glsa/201709-16
- https://www.exploit-db.com/exploits/42783/
- https://helpx.adobe.com/security/products/flash-player/apsb17-28.html
- https://access.redhat.com/errata/RHSA-2017:2702
- http://www.securitytracker.com/id/1039314