+33 (0)1 8695 8660
Vulnérabilités informatiques
Découvrez les nouveaux vecteurs d'attaques, failles et vulnérabilités informatiques
10 Jan 2017

CVE-2017-2925 - CVE Vulnerability

Publié par . Publié dans Memory corruption

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR codec. Successful exploitation could lead to arbitrary code execution. (CVSS:10.0) (Last Update:2017-01-11)

Vulnerability Details :

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR codec. Successful exploitation could lead to arbitrary code execution.
Publish Date : 2017-01-10 Last Update Date : 2017-01-11

- CVSS Scores & Vulnerability Types

CVSS Score
10.0
Confidentiality Impact Complete(There is total information disclosure, resulting in all system files being revealed.)
Integrity Impact Complete(There is a total compromise of system integrity. There is a complete loss of system protection, resulting in the entire system being compromised.)
Availability Impact Complete(There is a total shutdown of the affected resource. The attacker can render the resource completely unavailable.)
Access Complexity Low(Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. )
Authentication Not required(Authentication is not required to exploit the vulnerability.)
Gained Access None
Vulnerability Type(s) Execute CodeOverflowMemory corruption
CWE ID 119

- Products Affected By CVE-2017-2925

# Product Type Vendor Product Version Update Edition Language
1 Application Adobe Flash Player 24.0.0.186 Version Details Vulnerabilities
2 Application Adobe Flash Player 24.0.0.186 ~~~internet Explorer~~ Version Details Vulnerabilities
3 Application Adobe Flash Player 24.0.0.186 ~~~edge~~ Version Details Vulnerabilities
4 Application Adobe Flash Player 24.0.0.186 ~~~chrome~~ Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor Product Vulnerable Versions
Adobe Flash Player 4

- References For CVE-2017-2925

https://helpx.adobe.com/security/products/flash-player/apsb17-02.html CONFIRM

- Vulnerability Conditions

Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)
Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)
Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)

- Metasploit Modules Related To CVE-2017-2925

There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)

Pour nous Contacter

 Des questions à nous soumettre ?
 Demande d'intervention ou devis
 Soumission d'un appel d'offre
 Inscription à une formation

Newsletter Cybersécurité

Restez informé: recevez régulièrement les nouveautés et évènements en matière de cybersécurité et sécurité informatique.
En renseignant votre adresse email, vous acceptez de recevoir nos derniers articles de blog par courrier électronique et vous prenez connaissance de notre Politique de Confidentialité. Vous pouvez vous désinscrire à tout moment.

Ressources Sécurité

 Dernières vulnérabilités informatiques
 Blog sécurité informatique
 Glossaire sécurité informatique
 FAQ Questions Fréquentes

Notre expertise cybersécurité validée par de multiples certifications internationales

certifications sécurité informatique AKAOMA