CVE-2017-3063: Use After Free
Published Apr 12, 2017
·Updated
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the ActionScript2 NetStream class. Successful exploitation could lead to arbitrary code execution.
Affected Software
21 affected components
Adobe Flash Player Edge<=25.0.0.127
Adobe Flash Player Internet Explorer<=25.0.0.127
Microsoft Windows 10
Microsoft Windows 8.1
Adobe Flash Player Chrome<=25.0.0.127
Apple iOS and macOS
Google Chrome OS
Linux Linux kernel
Microsoft Windows
Adobe Flash Player<=25.0.0.127
All of the following
Any of the following
Adobe Flash Player Edge<=25.0.0.127
Adobe Flash Player Internet Explorer<=25.0.0.127
Any of the following
Microsoft Windows 10
Microsoft Windows 8.1
All of the following
Adobe Flash Player Chrome<=25.0.0.127
Any of the following
Google Chrome OS
Linux Linux kernel
Microsoft Windows
All of the following
Adobe Flash Player<=25.0.0.127
Any of the following
Linux Linux kernel
Microsoft Windows
Event History
Apr 12, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Data Sourced
via NVD·02:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-3063?
CVE-2017-3063 is considered a critical vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2017-3063?
To fix CVE-2017-3063, upgrade to Adobe Flash Player version 25.0.0.128 or later.
3
What versions of Adobe Flash Player are affected by CVE-2017-3063?
CVE-2017-3063 affects Adobe Flash Player versions 25.0.0.127 and earlier.
4
What can an attacker achieve by exploiting CVE-2017-3063?
Exploiting CVE-2017-3063 allows an attacker to execute arbitrary code on the affected system.
5
Which platforms are impacted by CVE-2017-3063?
CVE-2017-3063 impacts Adobe Flash Player running on various platforms, including Internet Explorer.