CVE-2017-3064

Published: Apr 12, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline. Successful exploitation could lead to arbitrary code execution.

Affected (4)

Products: Adobe: Flash Player

Adobe

1 product

Flash Player

Configuration A

2 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Adobe Flash Player	Up to 25.0.0.127
Adobe Flash Player	Up to 25.0.0.127

Running on/with	Platform Versions
Microsoft Windows 10	All versions
Microsoft Windows 8.1	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Adobe Flash Player	Up to 25.0.0.127

Running on/with	Platform Versions
Google Chrome Os	All versions

Configuration C

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Adobe Flash Player	Up to 25.0.0.127

Running on/with	Platform Versions
Apple Mac Os X	All versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (12)

http://www.securityfocus.com/bid/97557

Source: psirt@adobe.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038225

Source: psirt@adobe.com

https://access.redhat.com/errata/RHSA-2017:0934

Source: psirt@adobe.com

https://helpx.adobe.com/security/products/flash-player/apsb17-10.html

Source: psirt@adobe.com

Vendor Advisory

https://security.gentoo.org/glsa/201704-04

Source: psirt@adobe.com

https://www.exploit-db.com/exploits/42019/

Source: psirt@adobe.com

http://www.securityfocus.com/bid/97557