VULNERABILITY INTELLIGENCE
CVE-2017-3079
CVSS score9.8 CRITICAL
EPSS probability6.99%
CISA KEVNot currently listed
Published2017-06-20
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- psirt@adobe.com — Third Party Advisory, VDB Entry
- psirt@adobe.com
- psirt@adobe.com
- psirt@adobe.com — Vendor Advisory
- psirt@adobe.com
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108