PT-2017-1463 · Adobe+3 · Flash Player+3

CVE-2017-3003

·

Publicado

2017-03-14

·

Atualizado

2023-01-24

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 24.0.0.221 and earlier
Description The issue is related to an interaction between the privacy user interface and the ActionScript 2 Camera object, which leads to a use after free vulnerability. This vulnerability allows for arbitrary code execution when successfully exploited. The vulnerability is also described as allowing a remote attacker to execute arbitrary code.
Recommendations For Adobe Flash Player versions 24.0.0.221 and earlier, update to a version later than 24.0.0.221 to resolve the issue. At the moment, there is no information about other specific fixes for this vulnerability.

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALT-PU-2017-1308
ALT-PU-2018-2414
BDU:2017-00603
CVE-2017-3003
MGASA-2017-0087
RHSA-2017:0526
RHSA-2017_0526
SUSE-SU-2017:0703-1

Produtos afetados

Alt Linux
Flash Player
Red Hat
Suse