Skip to main content

Adobe Monthly Security Update (Sep 2017)

Last Update Date: 13 Sep 2017 09:42 Release Date: 13 Sep 2017 3408 Views

RISK: Medium Risk

TYPE: Clients - Audio & Video

TYPE: Audio & Video

Adobe has released monthly security update for their products:

 

Vulnerable ProductSeverityImpactsNotesDetails (including CVE)
Adobe RoboHelpModerately Critical Moderately CriticalCross-site Scripting
Spoofing
 APSB17-25
Adobe Flash PlayerModerately Critical Moderately CriticalRemote Code Execution APSB17-28
ColdFusionModerately Critical Moderately CriticalRemote Code Execution
Information Disclosure
 APSB17-30

 

Number of 'Extremely Critical' product(s): 0

Number of 'Highly Critical' product(s): 0

Number of 'Moderately Critical' product(s): 3

Evaluation of overall 'Criticality Level': Moderately Critical


Impact

  • Cross-Site Scripting
  • Remote Code Execution
  • Information Disclosure
  • Spoofing

System / Technologies affected

  • RoboHelp RH2017.0.1 and earlier  or RH12.0.4.460 and earlier
  • Adobe Flash Player 26.0.0.151 and earlier
  • ColdFusion (2016 release) Update 4 and earlier or ColdFusion 11 Update 12 and earlier

Please refer to the link below for detail:

http://blogs.adobe.com/psirt/?p=1491


Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • The vendor has issued security updates for the products. Please refer to 'Details' column in the above table for details of individual product update or run software update

Vulnerability Identifier


Source


Related Link