CVE-2017-3099: Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful…

high8.8CVSS 3.1

AVNACLPRNUIRSUCHIHAH

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
adobe	flash_player	<= 26.0.0.120	—
adobe	flash_player	<= 26.0.0.131	—
adobe	flash_player_desktop_runtime	<= 26.0.0.131	—

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

osv8.8HIGH