CVE-2017-3001
Fixed in a distro release EPSS 5%
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM. Successful exploitation could lead to arbitrary code execution.
Products: adobe flash_player, adobe flash_player_desktop_runtime
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 6 | flash-plugin | 0:25.0.0.127-1.el6_8 |
| SUSE Linux Enterprise Desktop 12 SP1 | flash-player | 25.0.0.127-162.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | flash-player | 25.0.0.127-162.1 |