CVE-2017-3001

HIGH · 8.8 CVSS Gepubliceerd: 14-03-2017 CWE-416

Beschrijving

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM. Successful exploitation could lead to arbitrary code execution.

Vendors

Adobe Apple Google Linux Microsoft

Affected products

Flash Player Mac Os X Chrome Os Linux Kernel Windows Windows 10 Windows 8.1 Flash Player Desktop Runtime

References

rhn.redhat.com
www.securityfocus.com
www.securitytracker.com
helpx.adobe.com
security.gentoo.org