CVE-2017-3112

Critical

Published: 09/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions related to reading data past the end of the target buffer. The use of an invalid pointer during access to internal data structure fields causes this vulnerability.

Risk Assessment

A successful attack can lead to sensitive data exposure, posing a significant security risk to the organization.

Recommendation

It is recommended to update Adobe Flash Player to the latest version to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of AdobePSDK metadata. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.