cbcvebase.
CVE-2017-3072
published 2017-05-09

CVE-2017-3072: Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class. Successful exploitation could…

high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution.

Affected

6 ranges
VendorProductVersion rangeFixed in
adobeflash_player<= 25.0.0.148
adobeflash_player_desktop_runtime<= 25.0.0.163
adobeflash_player_desktop_runtime<= 25.0.0.148
redhatenterprise_linux
redhatenterprise_linux_desktop
redhatenterprise_linux_workstation

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH