ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2017-3106

PoC —
CVSS 3.1
8.8 high
EPSS
22%p98
Published
()
Modified
Description

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.

Vendors
redhatadobe
Products
enterprise linux, enterprise linux desktop, enterprise linux workstation, flash player desktop runtime, flash player
Weakness
CWE-704
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (22.3%)

In the news