CVE-2017-3074

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class. Successful exploitation could lead to arbitrary code execution.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	Adobe Flash Player 25.0.0.148 and earlier.	Adobe Flash Player 25.0.0.148 and earlier.

References

http://www.securityfocus.com/bid/98349Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038427Broken Link, Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:1219Third Party Advisory
https://helpx.adobe.com/security/products/flash-player/apsb17-15.htmlPatch, Vendor Advisory
https://security.gentoo.org/glsa/201705-12Third Party Advisory
http://www.securityfocus.com/bid/98349Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038427Broken Link, Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2017:1219Third Party Advisory
https://helpx.adobe.com/security/products/flash-player/apsb17-15.htmlPatch, Vendor Advisory
https://security.gentoo.org/glsa/201705-12Third Party Advisory

Timeline

Published: May 9, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-30759.8Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XM CVE-2017-30769.8Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. Successful CVE-2017-30779.8Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful e CVE-2017-30789.8Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) mod CVE-2017-30799.8Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of ras CVE-2017-30806.5Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. CVE-2017-30819.8Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by mu CVE-2017-30829.8Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class. Successful exp CVE-2017-30839.8Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality relat CVE-2017-30849.8Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising metadata functionalit CVE-2017-30857.4Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing CVE-2017-30869.8Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to a