An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK metadata functionality. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Primetime SDK. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.

Adobe Security Bulletin APSB17-33 for Adobe Flash Player describes multiple flaws that can possibly lead to code execution when Flash Player is used to play a specially crafted SWF file.

Quoting from the APSB17-33:

Out-of-bounds Read Remote Code Execution Critical CVE-2017-3112 Out-of-bounds Read Remote Code Execution Critical CVE-2017-3114 Out-of-bounds Read Remote Code Execution Critical CVE-2017-11213 Use after free Remote Code Execution Critical CVE-2017-11215 Use after free Remote Code Execution Critical CVE-2017-11225

External References:

https://helpx.adobe.com/security/products/flash-player/apsb17-33.html