high8.8
CVE-2017-2936
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class.
Impact
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class. Successful exploitation could lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Flash Player | through 24.0.0.186 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2017-0057.html
- http://www.securityfocus.com/bid/95342
- http://www.securitytracker.com/id/1037570
- https://helpx.adobe.com/security/products/flash-player/apsb17-02.html
- https://security.gentoo.org/glsa/201702-20
- http://rhn.redhat.com/errata/RHSA-2017-0057.html
- http://www.securityfocus.com/bid/95342
- http://www.securitytracker.com/id/1037570
- https://helpx.adobe.com/security/products/flash-player/apsb17-02.html
- https://security.gentoo.org/glsa/201702-20