VYPR
← All advisories
High severity7.5NVD Advisory· Published May 3, 2017· Updated Jun 17, 2026

CVE-2017-5240

CVE-2017-5240

Description

Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component. A malicious or malformed Flash source file can cause a denial of service condition when parsed by this component, causing the application to crash.

Affected products

3
  • Rapid7/Appspider Pro3 versions
    cpe:2.3:a:rapid7:appspider_pro:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:rapid7:appspider_pro:*:*:*:*:*:*:*:*range: <=6.14.059
    • (no CPE)range: <6.14.060
    • (no CPE)range: All version prior to 6.14.060

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.