Files
vuln-nvd/data/2017/CVE-2017-3081.json
T

2 lines
5.4 KiB
JSON

{"affected":[{"affectedData":[{"product":"Adobe Flash Player 25.0.0.171 and earlier.","vendor":"n/a","versions":[{"status":"affected","version":"Adobe Flash Player 25.0.0.171 and earlier."}]}],"source":"psirt@adobe.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*","matchCriteriaId":"B6DFB24A-17E2-44F2-ABF0-6452A05BB7DF","versionEndIncluding":"25.0.0.171","vulnerable":true},{"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*","matchCriteriaId":"0AD9BAB7-264A-44F0-B386-C6A010FCB3C6","versionEndIncluding":"25.0.0.171","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*","matchCriteriaId":"FBC814B4-7DEC-4EFC-ABFF-08FFD9FD16AA","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*","matchCriteriaId":"A7F51B5F-AA19-4D31-89FA-6DFAC4BA8F0F","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*","matchCriteriaId":"CD726784-2878-4F1C-B8F5-CFE0A63C0956","versionEndIncluding":"25.0.0.171","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD","vulnerable":false},{"criteria":"cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*","matchCriteriaId":"D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79","vulnerable":false},{"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*","matchCriteriaId":"FE421134-FFEE-4027-8724-95D6FD108373","versionEndIncluding":"25.0.0.171","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD","vulnerable":false},{"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by multiple display object mask manipulations. Successful exploitation could lead to arbitrary code execution."},{"lang":"es","value":"Las versiones de Adobe Flash Player 25.0.0.171 y anteriores podrían permitir la explotación de una vulnerabilidad de uso después de liberación cuando se realiza computación interna causada por múltiples manipulaciones de máscaras de objetos. Una explotación exitosa podría conducir a la ejecución de código arbitrario."}],"id":"CVE-2017-3081","lastModified":"2026-06-17T01:17:28.560","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":10.0,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":10.0,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-06-20T17:29:00.330","references":[{"source":"psirt@adobe.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/99023"},{"source":"psirt@adobe.com","url":"http://www.securitytracker.com/id/1038655"},{"source":"psirt@adobe.com","url":"https://access.redhat.com/errata/RHSA-2017:1439"},{"source":"psirt@adobe.com","tags":["Vendor Advisory"],"url":"https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"},{"source":"psirt@adobe.com","url":"https://security.gentoo.org/glsa/201707-15"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/99023"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.securitytracker.com/id/1038655"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2017:1439"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://helpx.adobe.com/security/products/flash-player/apsb17-17.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://security.gentoo.org/glsa/201707-15"}],"sourceIdentifier":"psirt@adobe.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"nvd@nist.gov","type":"Primary"}]}