CVE-2017-2982: Use After Free
Published Feb 15, 2017
·Updated
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown. Successful exploitation could lead to arbitrary code execution.
Affected Software
21 affected components
Adobe Flash Player Chrome<=24.0.0.194
Apple iOS and macOS
Google Chrome OS
Linux Linux kernel
Microsoft Windows
Adobe Flash Player Edge<=24.0.0.194
Adobe Flash Player Internet Explorer<=24.0.0.194
Microsoft Windows 10
Microsoft Windows 8.1
Adobe Flash Player Desktop Runtime<=24.0.0.194
All of the following
Adobe Flash Player Chrome<=24.0.0.194
Any of the following
Google Chrome OS
Linux Linux kernel
Microsoft Windows
All of the following
Any of the following
Adobe Flash Player Edge<=24.0.0.194
Adobe Flash Player Internet Explorer<=24.0.0.194
Any of the following
Microsoft Windows 10
Microsoft Windows 8.1
All of the following
Adobe Flash Player Desktop Runtime<=24.0.0.194
Any of the following
Linux Linux kernel
Microsoft Windows
Event History
Feb 15, 2017
CVE Published
via MITRE·06:11 AM
Data Sourced
via MITRE·06:11 AM
DescriptionWeakness
Data Sourced
via NVD·06:59 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-2982?
CVE-2017-2982 has a high severity level due to its potential for arbitrary code execution.
2
How do I fix CVE-2017-2982?
To fix CVE-2017-2982, update Adobe Flash Player to version 24.0.0.195 or later.
3
What types of systems are vulnerable to CVE-2017-2982?
CVE-2017-2982 affects Adobe Flash Player versions 24.0.0.194 and earlier on various platforms.
4
What could be the impact of exploiting CVE-2017-2982?
Exploiting CVE-2017-2982 could allow attackers to execute arbitrary code on the affected system.
5
Is Adobe Flash Player still supported for CVE-2017-2982?
As of 2021, Adobe Flash Player is no longer supported, and users are advised to uninstall it.