CVE-2017-3075: Use After Free
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XML class. Successful exploitation could lead to arbitrary code execution.
Other sources
Adobe Security Bulletin APSB17-17 for Adobe Flash Player describes multiple flaws that can possibly lead to code execution when Flash Player is used to play a specially crafted SWF file.
Quoting from the APSB17-17:
Use After Free issues that can possibly lead to Remote Code Execution - CVE-2017-3075, CVE-2017-3081, CVE-2017-3083, CVE-2017-3084
Memory Corruption issues that can possibly lead to Remote Code Execution - CVE-2017-3076, CVE-2017-3077, CVE-2017-3078, CVE-2017-3079, CVE-2017-3082
External References:
https://helpx.adobe.com/security/products/flash-player/apsb17-17.html
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3075?
CVE-2017-3075 has a high severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2017-3075?
To mitigate CVE-2017-3075, update Adobe Flash Player to version 26.0.0.126 or later.
Which versions of Adobe Flash Player are affected by CVE-2017-3075?
CVE-2017-3075 affects Adobe Flash Player versions 25.0.0.171 and earlier.
What can happen if CVE-2017-3075 is exploited?
Exploitation of CVE-2017-3075 can lead to arbitrary code execution, allowing attackers to potentially take control of the affected system.
Is Adobe Flash Player on Windows 10 vulnerable to CVE-2017-3075?
No, Adobe Flash Player on Windows 10 is not vulnerable if it is updated to the safe version.