PT-2017-15650 · Adobe+1 · Flash Player+1

Published 2017-07-11 · Updated 2023-01-27 · CVE-2017-3100

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 26.0.0.131 and earlier

Description The issue is a memory corruption vulnerability in the Action Script 2 BitmapData class. This vulnerability could allow attackers to affect the system and lead to memory address disclosure. Successful exploitation of this issue could have significant consequences.

Recommendations For Adobe Flash Player versions 26.0.0.131 and earlier, consider updating to a version later than 26.0.0.131 to resolve the issue. As a temporary workaround, consider restricting the use of the Action Script 2 BitmapData class until a patch is available.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2017-3100

MGASA-2017-0211

RHSA-2017:1731

RHSA-2017_1731

ZDI-17-477

Affected Products

Flash Player

Red Hat

References · 15

• https://helpx.adobe.com/security/products/flash-player/apsb17-21.html · Vendor Advisory
• https://security.gentoo.org/glsa/201707-15 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-3100 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-3100 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-3100 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-17-477 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-3100 · Security Note
• https://access.redhat.com/errata/RHSA-2017:1731 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0211.html · Security Note
• https://osv.dev/vulnerability/CVE-2017-3100 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0211 · Vendor Advisory
• http://securityfocus.com/bid/99523 · Note
• http://securitytracker.com/id/1038845 · Note
• https://t.me/cvenotify/21275 · Telegram Post
• https://bugs.mageia.org/show_bug.cgi?id=21224 · Note