ZeroHour

CVE-2017-3003

CVSS 3.1
8.8 high
EPSS
5%p92
Published
()
Modified
Description

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object. Successful exploitation could lead to arbitrary code execution.

Vendors
adobe
Products
flash player, flash player desktop runtime
Weakness
CWE-416
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news