CVE-2017-3000

Published: Mar 14, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure.

Affected (4)

Products: Adobe: Flash Player, Flash Player Desktop Runtime

Adobe

2 products

Flash Player

Flash Player Desktop Runtime

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Adobe Flash Player	Up to 24.0.0.221

Running on/with	Platform Versions
Google Chrome Os	All versions

Configuration B

2 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Adobe Flash Player	Up to 24.0.0.221
Adobe Flash Player	Up to 24.0.0.221

Running on/with	Platform Versions
Microsoft Windows 10	All versions
Microsoft Windows 8.1	All versions

Configuration C

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Adobe Flash Player Desktop Runtime	Up to 24.0.0.221

Running on/with	Platform Versions
Apple Mac Os X	All versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

References (10)

http://rhn.redhat.com/errata/RHSA-2017-0526.html

Source: psirt@adobe.com

Third Party Advisory

http://www.securityfocus.com/bid/96862

Source: psirt@adobe.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037994

Source: psirt@adobe.com

Broken LinkThird Party AdvisoryVDB Entry

https://helpx.adobe.com/security/products/flash-player/apsb17-07.html

Source: psirt@adobe.com

PatchVendor Advisory

https://security.gentoo.org/glsa/201703-02

Source: psirt@adobe.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-0526.html