PT-2017-2036 · Adobe+3 · Flash Player+3

CVE-2017-3072

·

Published

2017-05-09

·

Updated

2023-01-27

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.148 and earlier
Description The issue is related to a memory corruption vulnerability in the BitmapData class of Adobe Flash Player. This vulnerability is caused by a buffer overflow in memory, which could allow a remote attacker to execute arbitrary code. Successful exploitation could lead to arbitrary code execution.
Recommendations For Adobe Flash Player versions 25.0.0.148 and earlier, update to a version later than 25.0.0.148 to resolve the issue. As a temporary workaround, consider disabling the use of the BitmapData class until a patch is available. Restrict access to Flash content to minimize the risk of exploitation.

Fix

Memory Corruption

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2017-1581
ALT-PU-2018-2414
BDU:2017-01203
CVE-2017-3072
MGASA-2017-0143
RHSA-2017:1219
RHSA-2017_1219
SUSE-SU-2017:1238-1

Affected Products

Alt Linux
Flash Player
Red Hat
Suse