|Number of vulnerabilities||1|
|CVE ID|| CVE-2017-11292
|CWE ID|| CWE-704
|Public exploit||This vulnerability is being exploited in the wild.|
Adobe Flash Player
|Vulnerable software versions||
Adobe Flash Player 22.214.171.124
Adobe Flash Player 126.96.36.199
Adobe Flash Player 188.8.131.52
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a type confusion error when processing .swf files. A remote unauthenticated attacker can create a specially crafted .swf file, trick the victim into opening it and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Note: this vulnerability is being actively exploited in the wild.
Update to version 184.108.40.206.External links