Lookup for vulnerable packages by Package URL.

Purlpkg:ebuild/www-plugins/adobe-flash@27.0.0.170
Typeebuild
Namespacewww-plugins
Nameadobe-flash
Version27.0.0.170
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version27.0.0.187
Latest_non_vulnerable_version32.0.0.387
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-f9kr-ycgy-gyey
vulnerability_id VCID-f9kr-ycgy-gyey
summary Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11292.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11292.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-11292
reference_id
reference_type
scores
0
value 0.34362
scoring_system epss
scoring_elements 0.97109
published_at 2026-06-12T12:55:00Z
1
value 0.34362
scoring_system epss
scoring_elements 0.971
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-11292
2
reference_url http://www.securityfocus.com/bid/101286
reference_id 101286
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:33:29Z/
url http://www.securityfocus.com/bid/101286
3
reference_url http://www.securitytracker.com/id/1039582
reference_id 1039582
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:33:29Z/
url http://www.securitytracker.com/id/1039582
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1502726
reference_id 1502726
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1502726
5
reference_url https://security.gentoo.org/glsa/201710-22
reference_id 201710-22
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:33:29Z/
url https://security.gentoo.org/glsa/201710-22
6
reference_url https://helpx.adobe.com/security/products/flash-player/apsb17-32.html
reference_id apsb17-32.html
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:33:29Z/
url https://helpx.adobe.com/security/products/flash-player/apsb17-32.html
7
reference_url https://access.redhat.com/errata/RHSA-2017:2899
reference_id RHSA-2017:2899
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:33:29Z/
url https://access.redhat.com/errata/RHSA-2017:2899
fixed_packages
0
url pkg:ebuild/www-plugins/adobe-flash@27.0.0.170
purl pkg:ebuild/www-plugins/adobe-flash@27.0.0.170
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-plugins/adobe-flash@27.0.0.170
aliases CVE-2017-11292
risk_score 10.0
exploitability 2.0
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f9kr-ycgy-gyey
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:ebuild/www-plugins/adobe-flash@27.0.0.170