Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header. Successful exploitation could lead to arbitrary code execution.
The product writes data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://security.gentoo.org/glsa/201702-20 | third party advisory vendor advisory |
| http://rhn.redhat.com/errata/RHSA-2017-0275.html | third party advisory vendor advisory |
| http://www.securityfocus.com/bid/96193 | vdb entry third party advisory broken link |
| http://www.securitytracker.com/id/1037815 | vdb entry third party advisory broken link |
| https://www.exploit-db.com/exploits/41420/ | exploit vdb entry third party advisory |
| https://helpx.adobe.com/security/products/flash-player/apsb17-04.html | patch vendor advisory |