CVE-2017-2984
Fixed in a distro release EPSS 18%
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine. Successful exploitation could lead to arbitrary code execution.
Products: adobe flash_player, adobe flash_player_desktop_runtime
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 6 | flash-plugin | 0:24.0.0.221-1.el6_8 |
| Ubuntu 14.04 LTS | flashplugin-nonfree | 24.0.0.221ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | flashplugin-nonfree | 24.0.0.221ubuntu0.16.04.1 |