CVE-2017-3100: Medium severity adobe flash player vulnerability
Published Jul 14, 2017
·Updated
Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class. Successful exploitation could lead to memory address disclosure.
Affected Software
10 affected components
Adobe Flash Player Desktop Runtime<=26.0.0.131
Apple iOS and macOS
Linux Linux kernel
Microsoft Windows
Adobe Flash Player Edge<=26.0.0.120
Adobe Flash Player Internet Explorer<=26.0.0.120
Microsoft Windows 10
Microsoft Windows 8.1
Adobe Flash Player Chrome<=26.0.0.131
Google Chrome OS
Remediation
Event History
Jul 14, 2017
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-3100?
CVE-2017-3100 is considered a critical vulnerability due to its potential for memory address disclosure through memory corruption.
2
How do I fix CVE-2017-3100?
To fix CVE-2017-3100, update Adobe Flash Player to version 27.0.0.130 or later.
3
What are the affected versions by CVE-2017-3100?
CVE-2017-3100 affects Adobe Flash Player versions 26.0.0.131 and earlier.
4
What types of attacks can CVE-2017-3100 facilitate?
CVE-2017-3100 can facilitate attacks that result in memory address disclosure, potentially enabling further exploitation.
5
Is my system vulnerable to CVE-2017-3100 if I am using a newer version of Flash Player?
No, if you are using Adobe Flash Player version 27.0.0.130 or newer, your system is not vulnerable to CVE-2017-3100.