CVE-2017-3099
published 2017-07-17CVE-2017-3099: Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful…
PriorityP346high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
8.55%
94.5th percentile
Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | flash_player | <= 26.0.0.120 | — |
| adobe | flash_player | <= 26.0.0.131 | — |
| adobe | flash_player_desktop_runtime | <= 26.0.0.131 | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv8.8HIGH
vendor_redhat8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
flash-plugin: code execution issue fixed in APSB17-21
vendor_redhat·2017-07-11·CVSS 8.8
CVE-2017-3099 [HIGH] flash-plugin: code execution issue fixed in APSB17-21
flash-plugin: code execution issue fixed in APSB17-21
Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution.
GHSA
GHSA-9ww6-3m5v-h28h: Adobe Flash Player versions 26
ghsa_unreviewed·2022-05-13
CVE-2017-3099 [CRITICAL] CWE-119 GHSA-9ww6-3m5v-h28h: Adobe Flash Player versions 26
Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution.
OSV
CVE-2017-3099: Adobe Flash Player versions 26
osv·2017-07-17·CVSS 8.8
CVE-2017-3099 [HIGH] CVE-2017-3099: Adobe Flash Player versions 26
Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution.
No detection rules found.
No public exploits indexed.
http://www.securityfocus.com/bid/99520http://www.securitytracker.com/id/1038845https://access.redhat.com/errata/RHSA-2017:1731https://helpx.adobe.com/security/products/flash-player/apsb17-21.htmlhttps://security.gentoo.org/glsa/201707-15http://www.securityfocus.com/bid/99520http://www.securitytracker.com/id/1038845https://access.redhat.com/errata/RHSA-2017:1731https://helpx.adobe.com/security/products/flash-player/apsb17-21.htmlhttps://security.gentoo.org/glsa/201707-15
2017-07-17
Published