Description
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a Adobe Flash Player 26.0.0.151 and earlier versions
Adobe Flash Player 26.0.0.151 and earlier versionsaffected
References
- http://packetstormsecurity.com/files/144332/Adobe-Flash-appleToRange-Out-Of-Bounds-Read.html ↗
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1323 ↗
- http://www.securityfocus.com/bid/100716 ↗
- https://www.youtube.com/watch?v=6iZnIQbRf5M ↗
- https://security.gentoo.org/glsa/201709-16 ↗
- https://www.exploit-db.com/exploits/42783/ ↗
- https://helpx.adobe.com/security/products/flash-player/apsb17-28.html ↗
- https://access.redhat.com/errata/RHSA-2017:2702 ↗
- http://www.securitytracker.com/id/1039314 ↗