PT-2017-15636 · Adobe+2 · Flash Player+2

Published 2017-07-11 · Updated 2023-01-27 · CVE-2017-3080

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 26.0.0.131 and earlier

Description A security bypass issue in Adobe Flash Player allows attackers to obtain sensitive information. This issue is related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure.

Recommendations For Adobe Flash Player versions 26.0.0.131 and earlier, update to a version later than 26.0.0.131 to resolve the security bypass vulnerability.

Fix

Related Identifiers

CVE-2017-3080

MGASA-2017-0211

RHSA-2017:1731

RHSA-2017_1731

ZDI-17-486

Affected Products

Flash Player

Internet Explorer

Red Hat

References · 15

• https://helpx.adobe.com/security/products/flash-player/apsb17-21.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-3080 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-3080 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0211 · Vendor Advisory
• https://security.gentoo.org/glsa/201707-15 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-17-486 · Security Note
• https://osv.dev/vulnerability/CVE-2017-3080 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-3080 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:1731 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-3080 · Security Note
• https://advisories.mageia.org/MGASA-2017-0211.html · Security Note
• http://securitytracker.com/id/1038845 · Note
• http://securityfocus.com/bid/99519 · Note
• https://t.me/cvenotify/21273 · Telegram Post
• https://bugs.mageia.org/show_bug.cgi?id=21224 · Note