Skip to content
OpenAdvisories
Unscored CVE-2017-5240 EUVD-2017-14345GHSA-fmgr-jrjf-26r6

Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component. A maliciou…

Published May 3, 2017 · Updated Aug 5, 2024 · Assigned by rapid7

Description

Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component. A malicious or malformed Flash source file can cause a denial of service condition when parsed by this component, causing the application to crash.

Affected products

VendorProductAffectedFixed
Rapid7 AppSpider Pro All version prior to 6.14.060 —

References