CVE-2017-5240: RAPID7 Appspider Pro

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component. A malicious or malformed Flash source file can cause a denial of service condition when parsed by this component, causing the application to crash.

Affected products

• RAPID7 Appspider Pro: up to and including 6.14.059

Published 2017-05-03. Last modified 2026-06-17.