CVE-2017-2936

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 24.0.0.186 and earlier

Description The issue is related to a use after free vulnerability in the ActionScript FileReference class, which can be exploited by a remote attacker to execute arbitrary code.

Recommendations For Adobe Flash Player versions 24.0.0.186 and earlier, update to a version later than 24.0.0.186 to resolve the issue. As a temporary workaround, consider disabling the FileReference class until a patch is available. Restrict access to the vulnerable ActionScript module to minimize the risk of exploitation.