CVE-2017-3059: Use After Free
Published Apr 12, 2017
·Updated
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object. Successful exploitation could lead to arbitrary code execution.
Affected Software
21 affected components
Adobe Flash Player Edge<=25.0.0.127
Adobe Flash Player Internet Explorer<=25.0.0.127
Microsoft Windows 10
Microsoft Windows 8.1
Adobe Flash Player Chrome<=25.0.0.127
Apple iOS and macOS
Google Chrome OS
Linux Linux kernel
Microsoft Windows
Adobe Flash Player<=25.0.0.127
All of the following
Any of the following
Adobe Flash Player Edge<=25.0.0.127
Adobe Flash Player Internet Explorer<=25.0.0.127
Any of the following
Microsoft Windows 10
Microsoft Windows 8.1
All of the following
Adobe Flash Player Chrome<=25.0.0.127
Any of the following
Google Chrome OS
Linux Linux kernel
Microsoft Windows
All of the following
Adobe Flash Player<=25.0.0.127
Any of the following
Linux Linux kernel
Microsoft Windows
Event History
Apr 12, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Data Sourced
via NVD·02:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-3059?
CVE-2017-3059 has a critical severity level due to its potential for arbitrary code execution.
2
How do I fix CVE-2017-3059?
To fix CVE-2017-3059, update Adobe Flash Player to version 25.0.0.128 or later.
3
Which versions of Adobe Flash Player are affected by CVE-2017-3059?
Adobe Flash Player versions 25.0.0.127 and earlier are affected by CVE-2017-3059.
4
What could happen if CVE-2017-3059 is exploited?
If exploited, CVE-2017-3059 could lead to arbitrary code execution on the affected system.
5
Is there any workaround for CVE-2017-3059?
Disabling Flash Player or uninstalling it can serve as a temporary workaround for CVE-2017-3059.