PT-2017-2034 · Adobe+3 · Flash Player+3

CVE-2017-3074

·

Published

2017-05-09

·

Updated

2023-01-30

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.148 and earlier
Description The issue is related to a memory corruption vulnerability in the Graphics class. This vulnerability can be exploited to achieve arbitrary code execution. The cause of the vulnerability is a buffer overflow in memory, which can be exploited by a remote attacker.
Recommendations For Adobe Flash Player versions 25.0.0.148 and earlier, update to a version later than 25.0.0.148 to resolve the issue. As a temporary workaround, consider disabling the Graphics class functionality until a patch is available. Restrict access to potentially vulnerable areas of the Flash Player to minimize the risk of exploitation.

Fix

Memory Corruption

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2017-1581
ALT-PU-2018-2414
BDU:2017-01201
CVE-2017-3074
MGASA-2017-0143
RHSA-2017:1219
RHSA-2017_1219
SUSE-SU-2017:1238-1

Affected Products

Alt Linux
Flash Player
Red Hat
Suse