VDB

CVE-2017-11292

CVE-2017-11292 PUBLISHED KEV CVSS 8.800000190734863 HIGH

Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.

EPSS 11.89% · 96.1th percentile

Risk Scores

CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
11.89%
96.1th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSflashplugin-nonfree0, 11.2.202.310ubuntu1, 11.2.202.332ubuntu1
Ubuntu:16.04:LTSflashplugin-nonfree0, 11.2.202.540ubuntu2, 11.2.202.548ubuntu1

Timeline

  • Oct 10, 2017 VulnCheck KEV Exploitation
  • Oct 16, 2017 CVE Published
  • Oct 16, 2017 VulnCheck KEV Exploitation
  • Oct 16, 2017 PoC Published
  • Apr 14, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 3, 2022 CISA KEV Added
  • Mar 3, 2022 VulnCheck KEV Exploitation
  • May 3, 2022 EPSS Score
  • Sep 6, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›