VYPR
High severity7.5NVD Advisory· Published May 3, 2017· Updated May 13, 2026

CVE-2017-5240

CVE-2017-5240

Description

Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component. A malicious or malformed Flash source file can cause a denial of service condition when parsed by this component, causing the application to crash.

Affected products

2
  • cpe:2.3:a:rapid7:appspider_pro:*:*:*:*:*:*:*:*
    Range: <=6.14.059
  • Rapid7/AppSpider Prov5
    Range: All version prior to 6.14.060

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.