← back
CVE-2017-3106

CVE-2017-3106

EPSS 22.3%
Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.
Affected products
Adobe Systems Incorporated · Flash Player
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/42480/unverifiedexploitdbwww.exploit-db.com/exploits/42480unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://access.redhat.com/errata/RHSA-2017:2457https://helpx.adobe.com/security/products/flash-player/apsb17-23.htmlhttps://security.gentoo.org/glsa/201709-16https://www.exploit-db.com/exploits/42480/http://www.securityfocus.com/bid/100190http://www.securitytracker.com/id/1039088