CVE-2017-3069: Critical severity adobe flash player vulnerability
Published May 9, 2017
·Updated
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class. Successful exploitation could lead to arbitrary code execution.
Affected Software
14 affected components
Adobe Flash Player Desktop Runtime<=25.0.0.163
Apple iOS and macOS
Adobe Flash Player Edge<=25.0.0.148
Adobe Flash Player Internet Explorer<=25.0.0.148
Microsoft Windows 10
Microsoft Windows 8.1
Adobe Flash Player Chrome<=25.0.0.148
Google Chrome OS
Linux Linux kernel
Microsoft Windows
Adobe Flash Player Desktop Runtime<=25.0.0.148
redhat Enterprise Linux=6.0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Workstation=6.0
Remediation
Event History
May 9, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-3069?
CVE-2017-3069 is rated as a critical vulnerability due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2017-3069?
To fix CVE-2017-3069, upgrade Adobe Flash Player to version 25.0.0.163 or later.
3
Which versions of Adobe Flash Player are affected by CVE-2017-3069?
CVE-2017-3069 affects Adobe Flash Player versions 25.0.0.148 and earlier.
4
What are the potential consequences of exploiting CVE-2017-3069?
Exploiting CVE-2017-3069 could lead to arbitrary code execution, allowing attackers to take control of the affected system.
5
Is Adobe Flash Player still supported after CVE-2017-3069?
As of December 2020, Adobe Flash Player has reached end-of-life and is no longer supported, which affects CVE-2017-3069 and other vulnerabilities.