CVE-2017-3106 Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.
HighCVSS 8.8
EPSS 22.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise linux | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| Adobe flash player desktop runtime | <= 26.0.0.137 | No fix listed |
| Adobe flash player | <= 26.0.0.137 | No fix listed |
| Adobe Systems Incorporated Flash Player | = 26.0.0.137 and earlier. | No fix listed |
References
- 100190 third-party-advisory vdb-entry
- 1039088 broken-link third-party-advisory vdb-entry
- RHSA-2017:2457 third-party-advisory vendor-advisory
- helpx.adobe.com patch vendor-advisory
- GLSA-201709-16 third-party-advisory vendor-advisory
- 42480 exploit third-party-advisory vdb-entry