CVE-2017-3078

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exploitation could lead to arbitrary code execution.

Affected

Adobe Flash Player 25.0.0.171 and earlier.

CVSS v3.0 NVD

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

30.89% chance of exploitation in the next 30 days, 98th percentile

Published

2017-06-20

Updated

2024-08-05

Proof-of-concept exploits (1)

• homjxi0e/CVE-2017-30780★ · 2017-06-26

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/42249

Security advisories

• https://helpx.adobe.com/security/products/flash-player/apsb17-17.html
• http://www.securityfocus.com/bid/99025

References

• CVE Record
• NVD entry

Related

• CVE-2016-7255
• CVE-2017-0108
• CVE-2017-1000367
• CVE-2017-2671
• CVE-2017-3881
• CVE-2017-5638