CVE-2017-2985: Use After Free
Published Feb 15, 2017
·Updated
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. Successful exploitation could lead to arbitrary code execution.
Affected Software
21 affected components
Adobe Flash Player Chrome<=24.0.0.194
Apple iOS and macOS
Google Chrome OS
Linux Linux kernel
Microsoft Windows
Adobe Flash Player Edge<=24.0.0.194
Adobe Flash Player Internet Explorer<=24.0.0.194
Microsoft Windows 10
Microsoft Windows 8.1
Adobe Flash Player Desktop Runtime<=24.0.0.194
All of the following
Adobe Flash Player Chrome<=24.0.0.194
Any of the following
Google Chrome OS
Linux Linux kernel
Microsoft Windows
All of the following
Any of the following
Adobe Flash Player Edge<=24.0.0.194
Adobe Flash Player Internet Explorer<=24.0.0.194
Any of the following
Microsoft Windows 10
Microsoft Windows 8.1
All of the following
Adobe Flash Player Desktop Runtime<=24.0.0.194
Any of the following
Linux Linux kernel
Microsoft Windows
Event History
Feb 15, 2017
CVE Published
via MITRE·06:11 AM
Data Sourced
via MITRE·06:11 AM
DescriptionWeakness
Data Sourced
via NVD·06:59 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-2985?
CVE-2017-2985 is considered a critical vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2017-2985?
To fix CVE-2017-2985, update Adobe Flash Player to version 25.0.0.126 or later.
3
What versions are affected by CVE-2017-2985?
CVE-2017-2985 affects Adobe Flash Player versions 24.0.0.194 and earlier.
4
What kind of attack can exploit CVE-2017-2985?
CVE-2017-2985 can be exploited through a use after free vulnerability, which can lead to arbitrary code execution.
5
Is CVE-2017-2985 specific to any operating system?
CVE-2017-2985 specifically affects Adobe Flash Player on various operating systems, including those running version 24.0.0.194.