CVE-2017-2986

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec. Successful exploitation could lead to arbitrary code execution.

Affected

Adobe Flash Player 24.0.0.194 and earlier.

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

30.87% chance of exploitation in the next 30 days, 98th percentile

Published

2017-02-15

Updated

2024-08-05

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/41423

Security advisories

• https://helpx.adobe.com/security/products/flash-player/apsb17-04.html
• http://rhn.redhat.com/errata/RHSA-2017-0275.html
• http://www.securityfocus.com/bid/96193
• http://www.securitytracker.com/id/1037815
• https://security.gentoo.org/glsa/201702-20

References

• CVE Record
• NVD entry