CVE-2017-3077

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could lead to arbitrary code execution.

Affected

Adobe Flash Player 25.0.0.171 and earlier.

CVSS v3.0 NVD

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

22.26% chance of exploitation in the next 30 days, 98th percentile

Published

2017-06-20

Updated

2024-08-05

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/42248

Security advisories

• https://helpx.adobe.com/security/products/flash-player/apsb17-17.html
• http://www.securityfocus.com/bid/99025

References

• CVE Record
• NVD entry