Published: 15/02/2017 Updated: 17/11/2022

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Adobe Flash Player versions 24.0.0.194 and previous versions have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. Successful exploitation could lead to arbitrary code execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe flash_player
adobe flash_player_desktop_runtime

Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An update for flash-plugin is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Critical A Common Vulnerability Scoring Syst ...

A use-after-free vulnerability possibly leading to code execution has been found in Adobe Flash Player < 2400221 ...

Source: bugschromiumorg/p/project-zero/issues/detail?id=1007 The attached swf causes a use-after-free in applying bitmap filters Proof of Concept: githubcom/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/41422zip ...

CWE-416 https://helpx.adobe.com/security/products/flash-player/apsb17-04.html http://www.securityfocus.com/bid/96199 https://security.gentoo.org/glsa/201702-20 http://www.securitytracker.com/id/1037815 https://www.exploit-db.com/exploits/41422/http://rhn.redhat.com/errata/RHSA-2017-0275.html https://access.redhat.com/errata/RHSA-2017:0275 https://nvd.nist.gov https://www.exploit-db.com/exploits/41422/https://security.archlinux.org/CVE-2017-2985

CVE-2017-2985

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect