PT-2017-1245 · Adobe+3 · Flash Player+3
CVE-2017-2991
·
Publicado
2017-02-15
·
Atualizado
2025-08-05
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Adobe Flash Player versions 24.0.0.194 and earlier
Description
The issue is related to a memory corruption vulnerability in the h264 codec, specifically tied to decompression. This vulnerability can be exploited to achieve arbitrary code execution. The cause is an out-of-bounds memory operation in the codec, which can be exploited by a remote attacker to execute arbitrary code, resulting in memory damage.
Recommendations
For Adobe Flash Player versions 24.0.0.194 and earlier, consider disabling the h264 codec temporarily until a patch is available to prevent potential exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Flash Player
Red Hat
Suse