CVE-2017-3081 Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by multiple display object mask manipulations. Successful exploit...
CriticalCVSS 9.8
EPSS 15.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by multiple display object mask manipulations. Successful exploitation could lead to arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | <= 25.0.0.171 | No fix listed |
References
- 99023 third-party-advisory vdb-entry
- 1038655 vdb-entry
- RHSA-2017:1439 vendor-advisory
- helpx.adobe.com vendor-advisory
- GLSA-201707-15 vendor-advisory