ZeroHour

CVE-2017-3002

CVSS 3.1
8.8 high
EPSS
5%p92
Published
()
Modified
Description

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property. Successful exploitation could lead to arbitrary code execution.

Vendors
adobe
Products
flash player, flash player desktop runtime
Weakness
CWE-416
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news