PT-2017-1464 · Adobe+3 · Flash Player+3

CVE-2017-3002

·

Publicado

2017-03-14

·

Atualizado

2023-01-24

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 24.0.0.221 and earlier
Description The issue is related to an exploitable use after free vulnerability in the ActionScript2 TextField object, specifically concerning the variable property. This could lead to arbitrary code execution if successfully exploited. The vulnerability allows a remote attacker to execute arbitrary code.
Recommendations For Adobe Flash Player versions 24.0.0.221 and earlier, consider disabling the ActionScript2 TextField object until a patch is available. Restrict access to properties related to the variable property in the TextField object to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALT-PU-2017-1308
ALT-PU-2018-2414
BDU:2017-00604
CVE-2017-3002
MGASA-2017-0087
RHSA-2017:0526
RHSA-2017_0526
SUSE-SU-2017:0703-1

Produtos afetados

Alt Linux
Flash Player
Red Hat
Suse