{"id":"CVE-2017-11282","details":"Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier.","modified":"2026-04-16T06:24:18.693122426Z","published":"2017-12-01T08:29:00.263Z","references":[{"type":"ADVISORY","url":"http://packetstormsecurity.com/files/144332/Adobe-Flash-appleToRange-Out-Of-Bounds-Read.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/100716"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1039314"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2017:2702"},{"type":"ADVISORY","url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1323"},{"type":"ADVISORY","url":"https://helpx.adobe.com/security/products/flash-player/apsb17-28.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201709-16"},{"type":"EVIDENCE","url":"https://www.exploit-db.com/exploits/42783/"},{"type":"EVIDENCE","url":"https://www.youtube.com/watch?v=6iZnIQbRf5M"}],"affected":[{"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"26.0.0.151"}]},{"events":[{"introduced":"0"},{"last_affected":"26.0.0.151"}]},{"events":[{"introduced":"0"},{"last_affected":"26.0.0.151"}]},{"events":[{"introduced":"0"},{"last_affected":"26.0.0.151"}]},{"events":[{"introduced":"0"},{"last_affected":"6.0"}]},{"events":[{"introduced":"0"},{"last_affected":"6.0"}]},{"events":[{"introduced":"0"},{"last_affected":"6.0"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11282.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}