CVE-2017-3081: Use After Free
First published: Tue Jun 20 2017(Updated: )
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by multiple display object mask manipulations. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | <=25.0.0.171 | |
| Adobe Acrobat Reader | <=25.0.0.171 | |
| Microsoft Windows 10 | ||
| Microsoft Windows 8.1 | ||
| Adobe Acrobat Reader | <=25.0.0.171 | |
| Apple iOS and macOS | ||
| Chrome OS | ||
| Linux Kernel | ||
| Microsoft Windows | ||
| Adobe Acrobat Reader | <=25.0.0.171 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-3081?
CVE-2017-3081 has a critical severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2017-3081?
To fix CVE-2017-3081, upgrade Adobe Flash Player to version 25.0.0.172 or later.
What causes the vulnerability CVE-2017-3081?
CVE-2017-3081 is caused by a use after free vulnerability during internal computation from multiple display object mask manipulations.
Which versions of Adobe Flash Player are affected by CVE-2017-3081?
CVE-2017-3081 affects Adobe Flash Player versions 25.0.0.171 and earlier.
Can CVE-2017-3081 be exploited remotely?
Yes, CVE-2017-3081 can be exploited remotely, allowing attackers to execute arbitrary code.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/severity
- agent/last-modified-date
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/25.0.0.171
- vendor/microsoft
- canonical/microsoft windows 10
- canonical/microsoft windows 8.1
- vendor/apple
- canonical/apple ios and macos
- vendor/google
- canonical/chrome os
- vendor/linux
- canonical/linux kernel
- canonical/microsoft windows