CVE-2017-3100
Fixed in a distro release EPSS 4%
Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class. Successful exploitation could lead to memory address disclosure.
Products: adobe flash_player_desktop_runtime, adobe flash_player
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 6 | flash-plugin | 0:26.0.0.137-1.el6_9 |
| Ubuntu 14.04 LTS | flashplugin-nonfree | 26.0.0.137ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | flashplugin-nonfree | 26.0.0.137ubuntu0.16.04.1 |