Microsoft security advisory

ADV170002

February 2017 Adobe Flash Security Update

Related records (13)

TI-2017-02212 CVE-2017-2992 · GHSA-45vm-xm4v-hvqm

Out-of-bounds write in Adobe Flash Player 24.0.0.194 and earlier.

MEDIUM 63

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.32676 Published 2017-02-15 Partial fix CWE-787

TI-2017-02206 CVE-2017-2986 · GHSA-v2hm-3qvf-hf6w

Out-of-bounds write in Adobe Flash Player 24.0.0.194 and earlier.

MEDIUM 62

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.30873 Published 2017-02-15 Partial fix CWE-787

TI-2017-02205 CVE-2017-2985 · GHSA-cg93-xx8v-ph94

Use after free in Adobe Flash Player 24.0.0.194 and earlier.

MEDIUM 58

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.21828 Published 2017-02-15 Partial fix CWE-416

TI-2017-02208 CVE-2017-2988 · GHSA-4xf4-qc36-2g5v

Out-of-bounds write in Adobe Flash Player 24.0.0.194 and earlier.

MEDIUM 56

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.18095 Published 2017-02-15 Partial fix CWE-787

TI-2017-02204 CVE-2017-2984 · GHSA-p472-w7hw-225c

Out-of-bounds write in Adobe Flash Player 24.0.0.194 and earlier.

MEDIUM 56

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.18219 Published 2017-02-15 Partial fix CWE-787

TI-2017-02210 CVE-2017-2990 · GHSA-r62p-vhj4-j25h

Out-of-bounds write in Adobe Flash Player 24.0.0.194 and earlier.

MEDIUM 50

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0969 Published 2017-02-15 Partial fix CWE-787

TI-2017-02211 CVE-2017-2991 · GHSA-95c7-3m5f-qchq

Out-of-bounds write in Adobe Flash Player 24.0.0.194 and earlier.

MEDIUM 49

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08666 Published 2017-02-15 Partial fix CWE-787

TI-2017-02207 CVE-2017-2987 · GHSA-cqr9-g2qv-xv6v

Integer overflow in Adobe Flash Player 24.0.0.194 and earlier.

MEDIUM 49

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08526 Published 2017-02-15 Partial fix CWE-190

TI-2017-02215 CVE-2017-2995 · GHSA-fh45-wcx4-q345

Type confusion in Adobe Flash Player 24.0.0.194 and earlier.

MEDIUM 47

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06439 Published 2017-02-15 Partial fix CWE-843

TI-2017-02214 CVE-2017-2994 · GHSA-qjg3-fxfr-j85c

Use after free in Adobe Flash Player 24.0.0.194 and earlier.

MEDIUM 47

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06262 Published 2017-02-15 Partial fix CWE-416

TI-2017-02213 CVE-2017-2993 · GHSA-q96x-6xrc-vrgx

Use after free in Adobe Flash Player 24.0.0.194 and earlier.

MEDIUM 47

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06049 Published 2017-02-15 Partial fix CWE-416

TI-2017-02202 CVE-2017-2982 · GHSA-cxv8-vqmc-6hf4

Use after free in Adobe Flash Player 24.0.0.194 and earlier.

MEDIUM 47

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06049 Published 2017-02-15 Partial fix CWE-416

TI-2017-02216 CVE-2017-2996 · GHSA-23g4-fr3g-p745

Out-of-bounds write in Adobe Flash Player 24.0.0.194 and earlier.

MEDIUM 46

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04868 Published 2017-02-15 Partial fix CWE-787