CVE-2017-3077 Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could lead to arbitrary code execution.
CriticalCVSS 9.8
EPSS 22.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could lead to arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | <= 25.0.0.171 | No fix listed |
References
- 99025 third-party-advisory vdb-entry
- 1038655 vdb-entry
- RHSA-2017:1439 vendor-advisory
- helpx.adobe.com vendor-advisory
- GLSA-201707-15 vendor-advisory
- 42248 exploit