Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2017-3061

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation could lead to arbitrary code execution.

VectorNETWORK

PublishedApr 12, 2017, 14:59

Published Bypsirt@adobe.com

Base Score

Score9.8

Affected Versions

No affected versions found.

References

http://www.securityfocus.com/bid/97557
http://www.securitytracker.com/id/1038225
https://access.redhat.com/errata/RHSA-2017:0934
https://helpx.adobe.com/security/products/flash-player/apsb17-10.html
https://security.gentoo.org/glsa/201704-04
https://www.exploit-db.com/exploits/42018/

Weakness Type

CWE-119

CVSS Metrics

Base Score

9.8

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base SeverityCritical

Version

3.0

Attack Vector (AV)

NETWORK