Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2017-2925

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR codec. Successful exploitation could lead to arbitrary code execution.

VectorNETWORK

PublishedJan 11, 2017, 04:59

Published Bypsirt@adobe.com

Base Score

Score8.8

Affected Versions

No affected versions found.

References

http://rhn.redhat.com/errata/RHSA-2017-0057.html
http://www.securityfocus.com/bid/95350
http://www.securitytracker.com/id/1037570
https://helpx.adobe.com/security/products/flash-player/apsb17-02.html
https://security.gentoo.org/glsa/201702-20

Weakness Type

CWE-787

CVSS Metrics

Base Score

8.8

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK