VDB
CVE-2017-11281
CVE-2017-11281
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.
EPSS 33.88% · 98.3th percentile
Risk Scores
CVSS 3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
33.88%
98.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | flashplugin-nonfree | 0, 11.2.202.540ubuntu2, 11.2.202.548ubuntu1 |
| Ubuntu:14.04:LTS | flashplugin-nonfree | 11.2.202.508ubuntu0.14.04.1, 11.2.202.535ubuntu0.14.04.1, * |
Timeline
- Sep 13, 2017 CVE Published
- Sep 25, 2017 PoC Published
- Sep 28, 2017 PoC Published
- Apr 14, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 24, 2023 EPSS Score
- Jun 27, 2023 EPSS Score
- Jul 21, 2023 EPSS Score
- Oct 11, 2023 EPSS Score
- Nov 11, 2023 EPSS Score
- Jan 27, 2024 EPSS Score
References
- https://ubuntu.com/security/CVE-2017-11281 third-party-advisory
- https://rhn.redhat.com/errata/RHSA-2017-2702.html third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2017-11281 third-party-advisory