CVE-2017-11225
Fixed in a distro release EPSS 6%
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.
Products: redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, adobe flash_player
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 6 | flash-plugin | 0:27.0.0.187-1.el6_9 |
| SUSE Package Hub 12 SP2 | chromium | 66.0.3359.181-55.1 |
| Ubuntu 14.04 LTS | flashplugin-nonfree | 27.0.0.187ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | flashplugin-nonfree | 27.0.0.187ubuntu0.16.04.1 |
| openSUSE Tumbleweed | chromium | 93.0.4577.82-1.1 |
| openSUSE Tumbleweed | chromium | 113.0.5672.92-1.1 |