CVE-2017-3106: Incorrect Type Cast
Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.
Other sources
Adobe Security Bulletin APSB17-23 for Adobe Flash Player describes a flaw that can possibly lead to code execution when Flash Player is used to play a specially crafted SWF file.
Quoting from the APSB17-23:
Critical Type Confusion vulnerability that could lead to code execution - CVE-2017-3106
External References:
https://helpx.adobe.com/security/products/flash-player/apsb17-23.html
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3106?
CVE-2017-3106 has a critical severity level due to its potential for arbitrary code execution.
How do I fix CVE-2017-3106?
To fix CVE-2017-3106, update Adobe Flash Player to version 26.0.0.151 or later.
Which Adobe Flash Player versions are affected by CVE-2017-3106?
Adobe Flash Player versions 26.0.0.137 and earlier are affected by CVE-2017-3106.
What type of vulnerability is CVE-2017-3106?
CVE-2017-3106 is a type confusion vulnerability that occurs when parsing SWF files.
What are the potential consequences of exploiting CVE-2017-3106?
Successfully exploiting CVE-2017-3106 could lead to arbitrary code execution on the affected system.