CVE-2017-3064: Buffer Overflow
Published Apr 12, 2017
·Updated
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline. Successful exploitation could lead to arbitrary code execution.
Affected Software
21 affected components
Adobe Flash Player Edge<=25.0.0.127
Adobe Flash Player Internet Explorer<=25.0.0.127
Microsoft Windows 10
Microsoft Windows 8.1
Adobe Flash Player Chrome<=25.0.0.127
Apple iOS and macOS
Google Chrome OS
Linux Linux kernel
Microsoft Windows
Adobe Flash Player<=25.0.0.127
All of the following
Any of the following
Adobe Flash Player Edge<=25.0.0.127
Adobe Flash Player Internet Explorer<=25.0.0.127
Any of the following
Microsoft Windows 10
Microsoft Windows 8.1
All of the following
Adobe Flash Player Chrome<=25.0.0.127
Any of the following
Google Chrome OS
Linux Linux kernel
Microsoft Windows
All of the following
Adobe Flash Player<=25.0.0.127
Any of the following
Linux Linux kernel
Microsoft Windows
Event History
Apr 12, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Data Sourced
via NVD·02:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-3064?
CVE-2017-3064 has a critical severity rating due to its potential for arbitrary code execution.
2
How do I fix CVE-2017-3064?
To fix CVE-2017-3064, upgrade Adobe Flash Player to version 25.0.0.178 or later.
3
What versions of Adobe Flash Player are affected by CVE-2017-3064?
CVE-2017-3064 affects Adobe Flash Player versions 25.0.0.127 and earlier.
4
What type of vulnerability is CVE-2017-3064?
CVE-2017-3064 is a memory corruption vulnerability that can be exploited when parsing a shape outline.
5
Can CVE-2017-3064 be exploited remotely?
Yes, CVE-2017-3064 can be exploited remotely to execute arbitrary code on the victim's system.