Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2017-3079 (GCVE-0-2017-3079)
Vulnerability from cvelistv5
Published
2017-06-20 17:00
Modified
2024-08-05 14:16
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Memory Corruption
Summary
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| n/a | Adobe Flash Player 25.0.0.171 and earlier. |
Version: Adobe Flash Player 25.0.0.171 and earlier. |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T14:16:28.050Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
},
{
"name": "99025",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/99025"
},
{
"name": "1038655",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1038655"
},
{
"name": "RHSA-2017:1439",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
},
{
"name": "GLSA-201707-15",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201707-15"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Adobe Flash Player 25.0.0.171 and earlier.",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Adobe Flash Player 25.0.0.171 and earlier."
}
]
}
],
"datePublic": "2017-06-20T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Memory Corruption",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-01-04T19:57:01",
"orgId": "078d4453-3bcd-4900-85e6-15281da43538",
"shortName": "adobe"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
},
{
"name": "99025",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/99025"
},
{
"name": "1038655",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1038655"
},
{
"name": "RHSA-2017:1439",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
},
{
"name": "GLSA-201707-15",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201707-15"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2017-3079",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Adobe Flash Player 25.0.0.171 and earlier.",
"version": {
"version_data": [
{
"version_value": "Adobe Flash Player 25.0.0.171 and earlier."
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Memory Corruption"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"refsource": "CONFIRM",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
},
{
"name": "99025",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/99025"
},
{
"name": "1038655",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1038655"
},
{
"name": "RHSA-2017:1439",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
},
{
"name": "GLSA-201707-15",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201707-15"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
"assignerShortName": "adobe",
"cveId": "CVE-2017-3079",
"datePublished": "2017-06-20T17:00:00",
"dateReserved": "2016-12-02T00:00:00",
"dateUpdated": "2024-08-05T14:16:28.050Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2017-3079\",\"sourceIdentifier\":\"psirt@adobe.com\",\"published\":\"2017-06-20T17:29:00.300\",\"lastModified\":\"2025-04-20T01:37:25.860\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.\"},{\"lang\":\"es\",\"value\":\"Las versiones de Adobe Flash Player 25.0.0.171 y anteriores podr\u00edan permitir la explotaci\u00f3n de una vulnerabilidad de corrupci\u00f3n de memoria en la representaci\u00f3n interna de datos r\u00e1ster. Una explotaci\u00f3n exitosa podr\u00eda conducir a la ejecuci\u00f3n de c\u00f3digo arbitrario.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*\",\"versionEndIncluding\":\"25.0.0.171\",\"matchCriteriaId\":\"B6DFB24A-17E2-44F2-ABF0-6452A05BB7DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*\",\"versionEndIncluding\":\"25.0.0.171\",\"matchCriteriaId\":\"0AD9BAB7-264A-44F0-B386-C6A010FCB3C6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*\",\"versionEndIncluding\":\"25.0.0.171\",\"matchCriteriaId\":\"CD726784-2878-4F1C-B8F5-CFE0A63C0956\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"25.0.0.171\",\"matchCriteriaId\":\"FE421134-FFEE-4027-8724-95D6FD108373\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]}],\"references\":[{\"url\":\"http://www.securityfocus.com/bid/99025\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1038655\",\"source\":\"psirt@adobe.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1439\",\"source\":\"psirt@adobe.com\"},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb17-17.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201707-15\",\"source\":\"psirt@adobe.com\"},{\"url\":\"http://www.securityfocus.com/bid/99025\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1038655\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1439\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb17-17.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201707-15\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
CERTFR-2017-AVI-175
Vulnerability from certfr_avis
De multiples vulnérabilités ont été corrigées dans Adobe Flash Player et Shockwave Player. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | N/A | Adobe Flash Player Desktop Runtime versions antérieures à 26.0.0.126 sur Linux | ||
| Adobe | N/A | Adobe Flash Player Desktop Runtime versions antérieures à 26.0.0.126 sur Windows et Macintosh | ||
| Adobe | N/A | Adobe Flash Player pour Google Chrome versions antérieures à 26.0.0.126 sur Windows, Macintosh, Linux et Chrome OS | ||
| Adobe | N/A | Adobe Flash Player pour Microsoft Edge et Internet Explorer 11 versions antérieures à 26.0.0.120 sur Windows1 0 et 8.1 | ||
| Adobe | N/A | Adobe Shockwave Player versions antérieures à 12.2.9.199 sur Windows |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Flash Player Desktop Runtime versions ant\u00e9rieures \u00e0 26.0.0.126 sur Linux",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player Desktop Runtime versions ant\u00e9rieures \u00e0 26.0.0.126 sur Windows et Macintosh",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Google Chrome versions ant\u00e9rieures \u00e0 26.0.0.126 sur Windows, Macintosh, Linux et Chrome OS",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Microsoft Edge et Internet Explorer 11 versions ant\u00e9rieures \u00e0 26.0.0.120 sur Windows1 0 et 8.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Shockwave Player versions ant\u00e9rieures \u00e0 12.2.9.199 sur Windows",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2017-3083",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3083"
},
{
"name": "CVE-2017-3086",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3086"
},
{
"name": "CVE-2017-3077",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3077"
},
{
"name": "CVE-2017-3082",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3082"
},
{
"name": "CVE-2017-3076",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3076"
},
{
"name": "CVE-2017-3075",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3075"
},
{
"name": "CVE-2017-3084",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3084"
},
{
"name": "CVE-2017-3081",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3081"
},
{
"name": "CVE-2017-3078",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3078"
},
{
"name": "CVE-2017-3079",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3079"
}
],
"initial_release_date": "2017-06-14T00:00:00",
"last_revision_date": "2017-06-14T00:00:00",
"links": [],
"reference": "CERTFR-2017-AVI-175",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2017-06-14T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eAdobe Flash Player et Shockwave Player\u003c/span\u003e. Elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Adobe Flash Player et Shockwave Player",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb17-17 du 13 juin 2017",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb17-18 du 13 juin 2017",
"url": "https://helpx.adobe.com/security/products/shockwave/apsb17-18.html"
}
]
}
RHSA-2017:1439
Vulnerability from csaf_redhat
Published
2017-06-13 20:37
Modified
2025-10-09 17:50
Summary
Red Hat Security Advisory: flash-plugin security update
Notes
Topic
An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.
This update upgrades Flash Player to version 26.0.0.126.
Security Fix(es):
* This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2017-3075, CVE-2017-3076, CVE-2017-3077, CVE-2017-3078, CVE-2017-3079, CVE-2017-3081, CVE-2017-3082, CVE-2017-3083, CVE-2017-3084)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.\n\nThis update upgrades Flash Player to version 26.0.0.126.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2017-3075, CVE-2017-3076, CVE-2017-3077, CVE-2017-3078, CVE-2017-3079, CVE-2017-3081, CVE-2017-3082, CVE-2017-3083, CVE-2017-3084)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:1439",
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
},
{
"category": "external",
"summary": "1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1439.json"
}
],
"title": "Red Hat Security Advisory: flash-plugin security update",
"tracking": {
"current_release_date": "2025-10-09T17:50:30+00:00",
"generator": {
"date": "2025-10-09T17:50:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2017:1439",
"initial_release_date": "2017-06-13T20:37:03+00:00",
"revision_history": [
{
"date": "2017-06-13T20:37:03+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-06-13T20:37:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T17:50:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"product": {
"name": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"product_id": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@26.0.0.126-1.el6_9?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:26.0.0.126-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
},
"product_reference": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:26.0.0.126-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
},
"product_reference": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:26.0.0.126-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
},
"product_reference": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-3075",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XML class. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3075"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3075",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3075"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3076",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3076"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3076",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3076"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3076",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3076"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3077",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3077"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3077",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3077"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3077",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3077"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3078",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3078"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3078",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3078"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3078",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3078"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3079",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3079"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3079",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3079"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3079",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3079"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3081",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by multiple display object mask manipulations. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3081"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3081",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3081"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3081",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3081"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3082",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3082"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3082",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3082"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3082",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3082"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3083",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality related to the profile metadata of the media stream. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3083"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3083",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3083"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3083",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3083"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3084",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising metadata functionality. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3084"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3084",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3084"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3084",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3084"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
}
]
}
rhsa-2017_1439
Vulnerability from csaf_redhat
Published
2017-06-13 20:37
Modified
2024-11-14 22:41
Summary
Red Hat Security Advisory: flash-plugin security update
Notes
Topic
An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.
This update upgrades Flash Player to version 26.0.0.126.
Security Fix(es):
* This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2017-3075, CVE-2017-3076, CVE-2017-3077, CVE-2017-3078, CVE-2017-3079, CVE-2017-3081, CVE-2017-3082, CVE-2017-3083, CVE-2017-3084)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.\n\nThis update upgrades Flash Player to version 26.0.0.126.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2017-3075, CVE-2017-3076, CVE-2017-3077, CVE-2017-3078, CVE-2017-3079, CVE-2017-3081, CVE-2017-3082, CVE-2017-3083, CVE-2017-3084)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:1439",
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
},
{
"category": "external",
"summary": "1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1439.json"
}
],
"title": "Red Hat Security Advisory: flash-plugin security update",
"tracking": {
"current_release_date": "2024-11-14T22:41:06+00:00",
"generator": {
"date": "2024-11-14T22:41:06+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:1439",
"initial_release_date": "2017-06-13T20:37:03+00:00",
"revision_history": [
{
"date": "2017-06-13T20:37:03+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-06-13T20:37:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T22:41:06+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"product": {
"name": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"product_id": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@26.0.0.126-1.el6_9?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:26.0.0.126-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
},
"product_reference": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:26.0.0.126-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
},
"product_reference": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:26.0.0.126-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
},
"product_reference": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-3075",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XML class. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3075"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3075",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3075"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3076",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3076"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3076",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3076"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3076",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3076"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3077",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3077"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3077",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3077"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3077",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3077"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3078",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3078"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3078",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3078"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3078",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3078"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3079",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3079"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3079",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3079"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3079",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3079"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3081",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by multiple display object mask manipulations. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3081"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3081",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3081"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3081",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3081"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3082",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3082"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3082",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3082"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3082",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3082"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3083",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality related to the profile metadata of the media stream. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3083"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3083",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3083"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3083",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3083"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3084",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising metadata functionality. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3084"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3084",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3084"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3084",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3084"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
}
]
}
rhsa-2017:1439
Vulnerability from csaf_redhat
Published
2017-06-13 20:37
Modified
2025-10-09 17:50
Summary
Red Hat Security Advisory: flash-plugin security update
Notes
Topic
An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.
This update upgrades Flash Player to version 26.0.0.126.
Security Fix(es):
* This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2017-3075, CVE-2017-3076, CVE-2017-3077, CVE-2017-3078, CVE-2017-3079, CVE-2017-3081, CVE-2017-3082, CVE-2017-3083, CVE-2017-3084)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.\n\nThis update upgrades Flash Player to version 26.0.0.126.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2017-3075, CVE-2017-3076, CVE-2017-3077, CVE-2017-3078, CVE-2017-3079, CVE-2017-3081, CVE-2017-3082, CVE-2017-3083, CVE-2017-3084)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:1439",
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
},
{
"category": "external",
"summary": "1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1439.json"
}
],
"title": "Red Hat Security Advisory: flash-plugin security update",
"tracking": {
"current_release_date": "2025-10-09T17:50:30+00:00",
"generator": {
"date": "2025-10-09T17:50:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.9"
}
},
"id": "RHSA-2017:1439",
"initial_release_date": "2017-06-13T20:37:03+00:00",
"revision_history": [
{
"date": "2017-06-13T20:37:03+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-06-13T20:37:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-10-09T17:50:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"product": {
"name": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"product_id": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@26.0.0.126-1.el6_9?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:26.0.0.126-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
},
"product_reference": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"relates_to_product_reference": "6Client-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:26.0.0.126-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
},
"product_reference": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"relates_to_product_reference": "6Server-Supplementary-6.9.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:26.0.0.126-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
},
"product_reference": "flash-plugin-0:26.0.0.126-1.el6_9.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.9.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-3075",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XML class. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3075"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3075",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3075"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3075",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3075"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3076",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3076"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3076",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3076"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3076",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3076"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3077",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3077"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3077",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3077"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3077",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3077"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3078",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3078"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3078",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3078"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3078",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3078"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3079",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3079"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3079",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3079"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3079",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3079"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3081",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by multiple display object mask manipulations. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3081"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3081",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3081"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3081",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3081"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3082",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3082"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3082",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3082"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3082",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3082"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3083",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality related to the profile metadata of the media stream. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3083"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3083",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3083"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3083",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3083"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
},
{
"cve": "CVE-2017-3084",
"discovery_date": "2017-06-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1461146"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising metadata functionality. Successful exploitation could lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB17-17",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3084"
},
{
"category": "external",
"summary": "RHBZ#1461146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1461146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3084",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3084"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3084",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3084"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
}
],
"release_date": "2017-06-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-13T20:37:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Server-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686",
"6Workstation-Supplementary-6.9.z:flash-plugin-0:26.0.0.126-1.el6_9.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB17-17"
}
]
}
ghsa-36mx-gp2g-xh52
Vulnerability from github
Published
2022-05-14 03:54
Modified
2022-05-14 03:54
Severity ?
VLAI Severity ?
Details
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.
{
"affected": [],
"aliases": [
"CVE-2017-3079"
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2017-06-20T17:29:00Z",
"severity": "CRITICAL"
},
"details": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.",
"id": "GHSA-36mx-gp2g-xh52",
"modified": "2022-05-14T03:54:33Z",
"published": "2022-05-14T03:54:33Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3079"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201707-15"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/99025"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1038655"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
gsd-2017-3079
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2017-3079",
"description": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.",
"id": "GSD-2017-3079",
"references": [
"https://www.suse.com/security/cve/CVE-2017-3079.html",
"https://access.redhat.com/errata/RHSA-2017:1439",
"https://advisories.mageia.org/CVE-2017-3079.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2017-3079"
],
"details": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.",
"id": "GSD-2017-3079",
"modified": "2023-12-13T01:21:16.297570Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2017-3079",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Adobe Flash Player 25.0.0.171 and earlier.",
"version": {
"version_data": [
{
"version_value": "Adobe Flash Player 25.0.0.171 and earlier."
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Memory Corruption"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"refsource": "CONFIRM",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
},
{
"name": "99025",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/99025"
},
{
"name": "1038655",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1038655"
},
{
"name": "RHSA-2017:1439",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
},
{
"name": "GLSA-201707-15",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201707-15"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
"cpe_name": [],
"versionEndIncluding": "25.0.0.171",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
"cpe_name": [],
"versionEndIncluding": "25.0.0.171",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
"cpe_name": [],
"versionEndIncluding": "25.0.0.171",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "25.0.0.171",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2017-3079"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"refsource": "CONFIRM",
"tags": [
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
},
{
"name": "99025",
"refsource": "BID",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/99025"
},
{
"name": "1038655",
"refsource": "SECTRACK",
"tags": [],
"url": "http://www.securitytracker.com/id/1038655"
},
{
"name": "GLSA-201707-15",
"refsource": "GENTOO",
"tags": [],
"url": "https://security.gentoo.org/glsa/201707-15"
},
{
"name": "RHSA-2017:1439",
"refsource": "REDHAT",
"tags": [],
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
},
"lastModifiedDate": "2018-01-05T02:31Z",
"publishedDate": "2017-06-20T17:29Z"
}
}
}
cnvd-2017-10263
Vulnerability from cnvd
Title
Adobe Flash Player内存破坏漏洞（CNVD-2017-10263）
Description
Adobe Flash Player是美国奥多比（Adobe）公司的一款跨平台、基于浏览器的多媒体播放器产品。该产品支持跨屏幕和浏览器查看应用程序、内容和视频。
Adobe Flash Player中存在内存破坏漏洞。远程攻击者可利用该漏洞执行代码。
Severity
高
VLAI Severity ?
Patch Name
Adobe Flash Player内存破坏漏洞（CNVD-2017-10263）的补丁
Patch Description
Adobe Flash Player是美国奥多比（Adobe）公司的一款跨平台、基于浏览器的多媒体播放器产品。该产品支持跨屏幕和浏览器查看应用程序、内容和视频。
Adobe Flash Player中存在内存破坏漏洞。远程攻击者可利用该漏洞执行代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
厂商已发布了漏洞修复程序，请及时关注更新： https://helpx.adobe.com/security/products/flash-player/apsb17-17.html
Reference
https://helpx.adobe.com/security/products/flash-player/apsb17-17.html
Impacted products
| Name | ['Adobe Flash Player Desktop Runtime <=25.0.0.171', 'Adobe Flash Player for Google Chrome <=25.0.0.171', 'Adobe Flash Player for Microsoft Edge and Internet Explorer 11 <=11 25.0.0.171'] |
|---|
{
"bids": {
"bid": {
"bidNumber": "99025"
}
},
"cves": {
"cve": {
"cveNumber": "CVE-2017-3079"
}
},
"description": "Adobe Flash Player\u662f\u7f8e\u56fd\u5965\u591a\u6bd4\uff08Adobe\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u8de8\u5e73\u53f0\u3001\u57fa\u4e8e\u6d4f\u89c8\u5668\u7684\u591a\u5a92\u4f53\u64ad\u653e\u5668\u4ea7\u54c1\u3002\u8be5\u4ea7\u54c1\u652f\u6301\u8de8\u5c4f\u5e55\u548c\u6d4f\u89c8\u5668\u67e5\u770b\u5e94\u7528\u7a0b\u5e8f\u3001\u5185\u5bb9\u548c\u89c6\u9891\u3002\r\n\r\nAdobe Flash Player\u4e2d\u5b58\u5728\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4ee3\u7801\u3002",
"discovererName": "Jihui Lu of Tencent KeenLab",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2017-10263",
"openTime": "2017-06-20",
"patchDescription": "Adobe Flash Player\u662f\u7f8e\u56fd\u5965\u591a\u6bd4\uff08Adobe\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u8de8\u5e73\u53f0\u3001\u57fa\u4e8e\u6d4f\u89c8\u5668\u7684\u591a\u5a92\u4f53\u64ad\u653e\u5668\u4ea7\u54c1\u3002\u8be5\u4ea7\u54c1\u652f\u6301\u8de8\u5c4f\u5e55\u548c\u6d4f\u89c8\u5668\u67e5\u770b\u5e94\u7528\u7a0b\u5e8f\u3001\u5185\u5bb9\u548c\u89c6\u9891\u3002\r\n\r\nAdobe Flash Player\u4e2d\u5b58\u5728\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Adobe Flash Player\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\uff08CNVD-2017-10263\uff09\u7684\u8865\u4e01",
"products": {
"product": [
"Adobe Flash Player Desktop Runtime \u003c=25.0.0.171",
"Adobe Flash Player for Google Chrome \u003c=25.0.0.171",
"Adobe Flash Player for Microsoft Edge and Internet Explorer 11 \u003c=11 25.0.0.171"
]
},
"referenceLink": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html",
"serverity": "\u9ad8",
"submitTime": "2017-06-14",
"title": "Adobe Flash Player\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\uff08CNVD-2017-10263\uff09"
}
fkie_cve-2017-3079
Vulnerability from fkie_nvd
Published
2017-06-20 17:29
Modified
2025-04-20 01:37
Severity ?
Summary
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.
References
| URL | Tags | ||
|---|---|---|---|
| psirt@adobe.com | http://www.securityfocus.com/bid/99025 | Third Party Advisory, VDB Entry | |
| psirt@adobe.com | http://www.securitytracker.com/id/1038655 | ||
| psirt@adobe.com | https://access.redhat.com/errata/RHSA-2017:1439 | ||
| psirt@adobe.com | https://helpx.adobe.com/security/products/flash-player/apsb17-17.html | Vendor Advisory | |
| psirt@adobe.com | https://security.gentoo.org/glsa/201707-15 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/99025 | Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securitytracker.com/id/1038655 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2017:1439 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://helpx.adobe.com/security/products/flash-player/apsb17-17.html | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://security.gentoo.org/glsa/201707-15 |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| adobe | flash_player | * | |
| adobe | flash_player | * | |
| microsoft | windows_10 | * | |
| microsoft | windows_8.1 | * | |
| adobe | flash_player | * | |
| apple | mac_os_x | - | |
| chrome_os | - | ||
| linux | linux_kernel | - | |
| microsoft | windows | - | |
| adobe | flash_player | * | |
| apple | mac_os_x | - | |
| linux | linux_kernel | - | |
| microsoft | windows | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
"matchCriteriaId": "B6DFB24A-17E2-44F2-ABF0-6452A05BB7DF",
"versionEndIncluding": "25.0.0.171",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
"matchCriteriaId": "0AD9BAB7-264A-44F0-B386-C6A010FCB3C6",
"versionEndIncluding": "25.0.0.171",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*",
"matchCriteriaId": "FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
"matchCriteriaId": "CD726784-2878-4F1C-B8F5-CFE0A63C0956",
"versionEndIncluding": "25.0.0.171",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"matchCriteriaId": "FE421134-FFEE-4027-8724-95D6FD108373",
"versionEndIncluding": "25.0.0.171",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution."
},
{
"lang": "es",
"value": "Las versiones de Adobe Flash Player 25.0.0.171 y anteriores podr\u00edan permitir la explotaci\u00f3n de una vulnerabilidad de corrupci\u00f3n de memoria en la representaci\u00f3n interna de datos r\u00e1ster. Una explotaci\u00f3n exitosa podr\u00eda conducir a la ejecuci\u00f3n de c\u00f3digo arbitrario."
}
],
"id": "CVE-2017-3079",
"lastModified": "2025-04-20T01:37:25.860",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2017-06-20T17:29:00.300",
"references": [
{
"source": "psirt@adobe.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/99025"
},
{
"source": "psirt@adobe.com",
"url": "http://www.securitytracker.com/id/1038655"
},
{
"source": "psirt@adobe.com",
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
},
{
"source": "psirt@adobe.com",
"tags": [
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
},
{
"source": "psirt@adobe.com",
"url": "https://security.gentoo.org/glsa/201707-15"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/99025"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securitytracker.com/id/1038655"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://access.redhat.com/errata/RHSA-2017:1439"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.gentoo.org/glsa/201707-15"
}
],
"sourceIdentifier": "psirt@adobe.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…