CVE-2017-3099
Fixed in a distro release EPSS 9%
Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution.
Products: adobe flash_player_desktop_runtime, adobe flash_player
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 6 | flash-plugin | 0:26.0.0.137-1.el6_9 |
| Ubuntu 14.04 LTS | flashplugin-nonfree | 26.0.0.137ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | flashplugin-nonfree | 26.0.0.137ubuntu0.16.04.1 |