PT-2017-1810 · Adobe+3 · Flash Player+3

Published 2017-04-12 · Updated 2018-10-02 · CVE-2017-3061

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.127 and earlier

Description The issue is related to a memory corruption vulnerability in the SWF parser of Adobe Flash Player. This vulnerability is caused by a buffer overflow in memory, which could allow a remote attacker to execute arbitrary code. Successful exploitation could lead to arbitrary code execution, potentially allowing an attacker to run malicious code.

Recommendations For Adobe Flash Player versions 25.0.0.127 and earlier, update to a version later than 25.0.0.127 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2017-1495

ALT-PU-2018-2414

BDU:2017-00966

CVE-2017-3061

MGASA-2017-0114

RHSA-2017:0934

RHSA-2017_0934

SUSE-SU-2017:0990-1

Affected Products

Alt Linux

Flash Player

Red Hat

Suse

References · 25

• 🔥 https://exploit-db.com/exploits/42018 · Exploit
• https://access.redhat.com/errata/RHSA-2017:0934 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-3061 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2017:0990-1 · Vendor Advisory
• https://helpx.adobe.com/security/products/flash-player/apsb17-10.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-3061 · Security Note
• https://osv.dev/vulnerability/CVE-2017-3061 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-3061 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-00966 · Security Note
• https://osv.dev/vulnerability/MGASA-2017-0114 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0114.html · Security Note
• https://security.gentoo.org/glsa/201704-04 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-3061 · Vendor Advisory
• https://bugzilla.suse.com/1033619 · Note
• https://suse.com/security/cve/CVE-2017-3062 · Note