cbcvebase.
CVE-2017-3085
published 2017-08-11

CVE-2017-3085: Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing URL redirect.

high7.4CVSS 3.1
AVNACLPRNUIRSCCHINAN
Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing URL redirect.

Affected

6 ranges
VendorProductVersion rangeFixed in
adobeflash_player<= 26.0.0.137
adobeflash_player_desktop_runtime<= 26.0.0.137
adobe_systems_incorporatedflash_player
redhatenterprise_linux
redhatenterprise_linux_desktop
redhatenterprise_linux_workstation

CVSS provenance

nvdv3.17.4HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
osv7.4HIGH