CVE Catalog

CVE-2017-3062

Critical
Published: Translated: NVD NIST

Summary

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionScript2 when creating a getter/setter property. Successful exploitation could lead to arbitrary code execution.

Risk Assessment

Exploitation of this vulnerability could allow attackers to execute arbitrary code remotely, posing a significant security risk to systems using Adobe Flash Player.

Recommendation

It is recommended to update Adobe Flash Player to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionScript2 when creating a getter/setter property. Successful exploitation could lead to arbitrary code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS