CVE-2017-3100: Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class. Successful…

medium6.5CVSS 3.1

AVNACLPRNUIRSUCHINAN

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class. Successful exploitation could lead to memory address disclosure.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
adobe	flash_player	<= 26.0.0.120	—
adobe	flash_player	<= 26.0.0.131	—
adobe	flash_player_desktop_runtime	<= 26.0.0.131	—

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

osv6.5MEDIUM