Vulnerability Description
Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Enterprise Linux | 6.0 |
| Redhat | Enterprise Linux Desktop | 6.0 |
| Redhat | Enterprise Linux Workstation | 6.0 |
| Adobe | Flash Player Desktop Runtime | <= 26.0.0.137 |
| Apple | Mac Os X | - |
| Linux | Linux Kernel | - |
| Microsoft | Windows | - |
| Adobe | Flash Player | <= 26.0.0.137 |
| Microsoft | Windows 10 | - |
| Microsoft | Windows 8.1 | - |
| Chrome Os | - |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/100190Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039088Broken LinkThird Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:2457Third Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb17-23.htmlPatchVendor Advisory
- https://security.gentoo.org/glsa/201709-16Third Party Advisory
- https://www.exploit-db.com/exploits/42480/ExploitThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/100190Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039088Broken LinkThird Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:2457Third Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb17-23.htmlPatchVendor Advisory
- https://security.gentoo.org/glsa/201709-16Third Party Advisory
- https://www.exploit-db.com/exploits/42480/ExploitThird Party AdvisoryVDB Entry
FAQ
What is CVE-2017-3106?
CVE-2017-3106 is a vulnerability with a CVSS score of 8.8 (HIGH). Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.
How severe is CVE-2017-3106?
CVE-2017-3106 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-3106?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Enterprise Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Workstation, Adobe Flash Player Desktop Runtime, Apple Mac Os X.