Description
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when parsing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | Adobe Flash Player 24.0.0.186 and earlier. | Adobe Flash Player 24.0.0.186 and earlier. |
References
- http://rhn.redhat.com/errata/RHSA-2017-0057.htmlThird Party Advisory
- http://www.securityfocus.com/bid/95347Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037570Broken Link, Third Party Advisory, VDB Entry
- https://helpx.adobe.com/security/products/flash-player/apsb17-02.htmlPatch, Vendor Advisory
- https://security.gentoo.org/glsa/201702-20Third Party Advisory
- https://www.exploit-db.com/exploits/41611/Exploit, Third Party Advisory, VDB Entry
- http://rhn.redhat.com/errata/RHSA-2017-0057.htmlThird Party Advisory
- http://www.securityfocus.com/bid/95347Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037570Broken Link, Third Party Advisory, VDB Entry
- https://helpx.adobe.com/security/products/flash-player/apsb17-02.htmlPatch, Vendor Advisory
- https://security.gentoo.org/glsa/201702-20Third Party Advisory
- https://www.exploit-db.com/exploits/41611/Exploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Jan 11, 2017
- Last modified
- Jun 17, 2026
- NVD status
- Modified