CVE-2017-11282

PoC ×2—

CVSS 3.0

9.8 critical

EPSS

35%p98

Published

Dec 1, 2017 (Dec 1, 2017)

Modified

Jun 17, 2026

Description

Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.

Vendors: adobe redhat
Products: flash player, enterprise linux desktop, enterprise linux server, enterprise linux workstation
Weakness: CWE-119
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (34.8%)

In the news2 stories

Adobe Patches Two Critical RCE Vulnerabilities in Flash Player

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2017Vulnerability in the wildCVE-2017-11281 CVE-2017-11282 CVE-2017-11286+5 CVEs

Adobe patches only two critical vulnerabilities in Flash Player in September

Security AffairsSep 13, 04:38 UTC · Sep 13, 2017Vulnerability in the wildCVE-2017-11281 CVE-2017-11282 CVE-2017-3104+1 CVEs