Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.

Versions of Adobe Flash Player prior to 27.0.0.130 are unpatched, and therefore affected by multiple vulnerabilities :

 - An unspecified memory corruption flaw exists that is caused by input not being properly validated. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a website containing specially crafted Flash content, to to corrupt memory and potentially execute arbitrary code. (CVE-2017-11281, CVE-2017-11282)

The remote host is affected by the vulnerability described in GLSA-201709-16 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the referenced CVE identifiers for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

The remote Windows host is missing security update KB4038806. It is, therefore, affected by multiple remote code execution vulnerabilies in Adobe Flash Player.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2017:2702 advisory.

    The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

    This update upgrades Flash Player to version 27.0.0.130.

    Security Fix(es):

    * This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the     Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially     crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive     information when the victim loaded a page containing the malicious SWF content. (CVE-2017-11281,     CVE-2017-11282)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Adobe reports :

- These updates resolve memory corruption vulnerabilities that could lead to remote code execution (CVE-2017-11281, CVE-2017-11282).

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 26.0.0.151. It is, therefore, affected by multiple vulnerabilities :

   - An unspecified memory corruption flaw exists that is     caused by input not being properly validated. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a website containing specially     crafted Flash content, to to corrupt memory and     potentially execute arbitrary code.
    (CVE-2017-11281, CVE-2017-11282)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 26.0.0.151. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified memory corruption flaw exists that is     caused by input not being properly validated. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a website containing specially     crafted Flash content, to to corrupt memory and     potentially execute arbitrary code.
    (CVE-2017-11281, CVE-2017-11282)

ID	Name	Product	Family	Severity
700425	Flash Player < 27.0.0.130 Multiple RCE (APSB17-28)	Nessus Network Monitor	Web Clients	high
103444	GLSA-201709-16 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
103220	KB4038806: Security update for Adobe Flash Player (September 2017)	Nessus	Windows : Microsoft Bulletins	critical
103205	RHEL 6 : flash-plugin (RHSA-2017:2702)	Nessus	Red Hat Local Security Checks	critical
103153	FreeBSD : Flash Player -- multiple vulnerabilities (531aae08-97f0-11e7-aadd-6451062f0f7a)	Nessus	FreeBSD Local Security Checks	critical
103125	Adobe Flash Player for Mac <= 26.0.0.151 Multiple Vulnerabilities (APSB17-23)	Nessus	MacOS X Local Security Checks	critical
103124	Adobe Flash Player <= 26.0.0.151 Multiple Vulnerabilities (APSB17-28)	Nessus	Windows	critical

Detections

Analytics

CVE-2017-11282

critical

Tenable Plugins

high

critical

critical

critical

critical

critical

critical