Vulnerabilitycritical

APT28 group is rushing to exploit recent CVE-2017-11292 Flash 0

Security Affairsby @securityaffairsOct 22, 2017 · 11:29 UTC (Oct 22, 2017)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2017-11292 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2017-11292 CVE-2015-7645 CVE-2016-1019 CVE-2016-4117 CVE-2016-7855

Tags: cve-2017-11292 cve-2015-7645 cve-2016-1019 cve-2016-4117 cve-2016-7855 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2015-7645	Arbitrary Code Execution in Adobe Flash Player via Crafted SWF Files	—	65%	KEVRansomware	— KEV Mar 3, 2022
CVE-2016-1019	Arbitrary code execution flaw in Adobe Flash Player, used in ransomware attacks	9.8	22%	KEVRansomware	Apr 7, 2016 KEV Mar 3, 2022
CVE-2016-4117	Arbitrary Code Execution in Adobe Flash Player 21.0.0.226 and earlier	9.8	94%	KEVRansomwarePoC	May 11, 2016 KEV Mar 3, 2022
CVE-2016-7855	Use-After-Free RCE in Adobe Flash Player (Windows, macOS, Linux)	8.8	25%	KEV	Nov 1, 2016 KEV Mar 3, 2022
CVE-2017-11292	Type Confusion in Adobe Flash Player 27 Allows Arbitrary Code Execution	8.8	12%	KEV	Oct 22, 2017 KEV Mar 3, 2022

From the original article

2 min read at securityaffairs.com

The APT28 group is trying to exploit the CVE-2017-11292 Flash zero-day before users receive patches or update their systems. Security experts at Proofpoint collected evidence of several malware campaigns, powered by the Russian APT28 group , that rely on a Flash zero-day vulnerability that Adobe patched earlier this week.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.