PT-2017-2036 · Adobe+3 · Flash Player+3
CVE-2017-3072
·
Publicado
2017-05-09
·
Atualizado
2023-01-27
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Adobe Flash Player versions 25.0.0.148 and earlier
Description
The issue is related to a memory corruption vulnerability in the BitmapData class of Adobe Flash Player. This vulnerability is caused by a buffer overflow in memory, which could allow a remote attacker to execute arbitrary code. Successful exploitation could lead to arbitrary code execution.
Recommendations
For Adobe Flash Player versions 25.0.0.148 and earlier, update to a version later than 25.0.0.148 to resolve the issue. As a temporary workaround, consider disabling the use of the BitmapData class until a patch is available. Restrict access to Flash content to minimize the risk of exploitation.
Correção
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Flash Player
Red Hat
Suse