CVE-2017-3083 Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality related to the profile metadata of the media stream. Successful e...
CriticalCVSS 9.8
EPSS 15.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality related to the profile metadata of the media stream. Successful exploitation could lead to arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | <= 25.0.0.171 | No fix listed |
References
- 99023 third-party-advisory vdb-entry
- 1038655 vdb-entry
- RHSA-2017:1439 vendor-advisory
- helpx.adobe.com vendor-advisory
- GLSA-201707-15 vendor-advisory