Vulnerability Description
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine. Successful exploitation could lead to arbitrary code execution.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Flash Player Desktop Runtime | <= 25.0.0.163 |
| Apple | Mac Os X | - |
| Adobe | Flash Player | <= 25.0.0.148 |
| Microsoft | Windows 10 | - |
| Microsoft | Windows 8.1 | - |
| Chrome Os | - | |
| Linux | Linux Kernel | - |
| Microsoft | Windows | - |
| Redhat | Enterprise Linux | 6.0 |
| Redhat | Enterprise Linux Desktop | 6.0 |
| Redhat | Enterprise Linux Workstation | 6.0 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/98349Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1038427Broken LinkThird Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:1219Third Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb17-15.htmlPatchVendor Advisory
- https://security.gentoo.org/glsa/201705-12Third Party Advisory
- https://www.exploit-db.com/exploits/42017/ExploitThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/98349Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1038427Broken LinkThird Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:1219Third Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb17-15.htmlPatchVendor Advisory
- https://security.gentoo.org/glsa/201705-12Third Party Advisory
- https://www.exploit-db.com/exploits/42017/ExploitThird Party AdvisoryVDB Entry
FAQ
What is CVE-2017-3068?
CVE-2017-3068 is a vulnerability with a CVSS score of 8.8 (HIGH). Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine. Successful exploitation could lead to arbitrary code executi...
How severe is CVE-2017-3068?
CVE-2017-3068 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-3068?
Check the references section above for vendor advisories and patch information. Affected products include: Adobe Flash Player Desktop Runtime, Apple Mac Os X, Adobe Flash Player, Microsoft Windows 10, Microsoft Windows 8.1.