PT-2017-2034 · Adobe+3 · Flash Player+3
CVE-2017-3074
·
Publicado
2017-05-09
·
Atualizado
2023-01-30
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Adobe Flash Player versions 25.0.0.148 and earlier
Description
The issue is related to a memory corruption vulnerability in the Graphics class. This vulnerability can be exploited to achieve arbitrary code execution. The cause of the vulnerability is a buffer overflow in memory, which can be exploited by a remote attacker.
Recommendations
For Adobe Flash Player versions 25.0.0.148 and earlier, update to a version later than 25.0.0.148 to resolve the issue. As a temporary workaround, consider disabling the Graphics class functionality until a patch is available. Restrict access to potentially vulnerable areas of the Flash Player to minimize the risk of exploitation.
Correção
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Flash Player
Red Hat
Suse