First published: Tue Jul 11 2017(Updated: )
Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/flash-plugin | <26.0.0.137 | 26.0.0.137 |
Adobe Flash Player | <=26.0.0.131 | |
macOS Yosemite | ||
Linux Kernel | ||
Microsoft Windows | ||
Adobe Flash Player for Internet Explorer 11 | <=26.0.0.120 | |
Adobe Flash Player for Internet Explorer 11 | <=26.0.0.120 | |
Microsoft Windows 10 | ||
Microsoft Windows 8.1 | ||
Adobe Flash Player for Internet Explorer 11 | <=26.0.0.131 | |
Google Chrome OS |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-3080 is classified as a security bypass vulnerability with potential for information disclosure.
To fix CVE-2017-3080, upgrade Adobe Flash Player to version 26.0.0.137 or later.
CVE-2017-3080 affects Adobe Flash Player versions 26.0.0.131 and earlier.
Yes, CVE-2017-3080 is specifically related to the Flash API used by Internet Explorer.
There are no official workarounds for CVE-2017-3080 other than applying the patch by upgrading to the latest version.