CVE-2017-2937

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript FileReference class, when using class inheritance. Successful exploitation could lead to arbitrary code execution.
References
Link Resource
https://helpx.adobe.com/security/products/flash-player/apsb17-02.html Patch Vendor Advisory
http://www.securityfocus.com/bid/95342 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037570 Broken Link Third Party Advisory VDB Entry
https://security.gentoo.org/glsa/201702-20 Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0057.html Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*
OR cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*
OR cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Information

Published : 2017-01-10 20:59

Updated : 2022-11-16 13:54


NVD link : CVE-2017-2937

Mitre link : CVE-2017-2937


JSON object : View

CWE
CWE-416

Use After Free

Advertisement

dedicated server usa

Products Affected

microsoft

  • windows
  • windows_8.1
  • windows_10

google

  • chrome_os

linux

  • linux_kernel

apple

  • mac_os_x

adobe

  • flash_player