PT-2017-1248 · Adobe+3 · Flash Player+3

CVE-2017-2987

·

Publicado

2017-02-15

·

Atualizado

2022-11-17

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 24.0.0.194 and earlier
Description The issue is related to an integer overflow vulnerability in Flash Broker COM, which could lead to arbitrary code execution if successfully exploited.
Recommendations For Adobe Flash Player versions 24.0.0.194 and earlier, update to a version later than 24.0.0.194 to resolve the issue. As a temporary workaround, consider disabling the Flash Broker COM component until a patch is available.

Correção

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2017-1172
BDU:2017-00362
CVE-2017-2987
MGASA-2017-0075
RHSA-2017:0275
RHSA-2017_0275
SUSE-SU-2017:0523-1

Produtos afetados

Alt Linux
Flash Player
Red Hat
Suse