CVE-2017-3068

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine. Successful exploitation could lead to arbitrary code execution.

Affected

Adobe Flash Player 25.0.0.148 and earlier.

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

20.35% chance of exploitation in the next 30 days, 97th percentile

Published

2017-05-09

Updated

2024-08-05

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/42017

Security advisories

• https://helpx.adobe.com/security/products/flash-player/apsb17-15.html
• http://www.securityfocus.com/bid/98349
• http://www.securitytracker.com/id/1038427
• https://access.redhat.com/errata/RHSA-2017:1219
• https://security.gentoo.org/glsa/201705-12

References

• CVE Record
• NVD entry