CVE-2017-3003: Use After Free

First published: Tue Mar 14 2017(Updated: )

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object. Successful exploitation could lead to arbitrary code execution.

Credit: psirt@adobe.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/weakness
• agent/description
• vendor/adobe
• canonical/adobe flash player
• version/adobe flash player/24.0.0.221
• vendor/apple
• canonical/apple mac os x
• vendor/google
• canonical/google chrome os
• vendor/linux
• canonical/linux linux kernel
• vendor/microsoft
• canonical/microsoft windows
• canonical/microsoft windows 10
• canonical/microsoft windows 8.1
• canonical/adobe flash player desktop runtime
• version/adobe flash player desktop runtime/24.0.0.221