CVE-2017-3072
Fixed in a distro release EPSS 5%
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution.
Products: adobe flash_player_desktop_runtime, adobe flash_player, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 6 | flash-plugin | 0:25.0.0.171-1.el6_9 |
| SUSE Linux Enterprise Desktop 12 SP1 | flash-player | 25.0.0.171-168.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | flash-player | 25.0.0.171-168.1 |
| Ubuntu 14.04 LTS | flashplugin-nonfree | 25.0.0.171ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | flashplugin-nonfree | 25.0.0.171ubuntu0.16.04.1 |