CVE-2017-3060 Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser. Successful exploitation could lead to arbitrary code execution.
CriticalCVSS 9.8
EPSS 7.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser. Successful exploitation could lead to arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | <= 25.0.0.127 | No fix listed |
References
- 97557 third-party-advisory vdb-entry
- 1038225 vdb-entry
- RHSA-2017:0934 vendor-advisory
- helpx.adobe.com vendor-advisory
- GLSA-201704-04 vendor-advisory
- www.zerodayinitiative.com third-party-advisory vdb-entry