CVE-2017-3063 Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the ActionScript2 NetStream class. Successful exploitation could lead to arbitrary code execution...
CriticalCVSS 9.8
EPSS 8.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the ActionScript2 NetStream class. Successful exploitation could lead to arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | <= 25.0.0.127 | No fix listed |
References
- 97551 third-party-advisory vdb-entry
- 1038225 vdb-entry
- RHSA-2017:0934 vendor-advisory
- helpx.adobe.com vendor-advisory
- GLSA-201704-04 vendor-advisory
- www.zerodayinitiative.com third-party-advisory vdb-entry