9.3
CVE-2017-3106
- EPSS 64.59%
- Veröffentlicht 11.08.2017 19:29:02
- Zuletzt bearbeitet 20.04.2025 01:37:25
- Quelle psirt@adobe.com
- Teams Watchlist Login
- Unerledigt Login
Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Enterprise Linux Version6.0
Redhat ≫ Enterprise Linux Desktop Version6.0
Redhat ≫ Enterprise Linux Workstation Version6.0
Adobe ≫ Flash Player Desktop Runtime Version <= 26.0.0.137
Adobe ≫ Flash Player SwPlatformedge Version <= 26.0.0.137
Adobe ≫ Flash Player SwPlatforminternet_explorer Version <= 26.0.0.137
Adobe ≫ Flash Player SwPlatformchrome Version <= 26.0.0.137
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 64.59% | 0.984 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-704 Incorrect Type Conversion or Cast
The product does not correctly convert an object, resource, or structure from one type to a different type.