Adobe Flash Player up to 25.0.0.148 ConvolutionFilter memory corruption
| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 8.4 | $0-$5k | 0.00 |
Summary
A vulnerability was found in Adobe Flash Player up to 25.0.0.148. It has been declared as critical. This vulnerability affects the function ConvolutionFilter. The manipulation leads to memory corruption.
This vulnerability was named CVE-2017-3070. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Details
A vulnerability was found in Adobe Flash Player up to 25.0.0.148 (Multimedia Player Software). It has been classified as critical. This affects the function ConvolutionFilter. The manipulation with an unknown input leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class. Successful exploitation could lead to arbitrary code execution.
The bug was discovered 05/09/2017. The weakness was shared 05/09/2017 by Natalie Silvanovich with Google Project Zero (Website). It is possible to read the advisory at helpx.adobe.com. This vulnerability is uniquely identified as CVE-2017-3070 since 12/02/2016. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 12/06/2022). It is expected to see the exploit prices for this product decreasing in the near future.
The vulnerability scanner Nessus provides a plugin with the ID 100052 (Adobe Flash Player <= 25.0.0.148 Multiple Vulnerabilities (APSB17-15)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Windows and running in the context l. The commercial vulnerability scanner Qualys is able to test this issue with plugin 370385 (Adobe Flash Player Remote Code Execution Vulnerability (APSB17-15)).
Upgrading eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at Tenable (100052) and SecurityFocus (BID 98349†). The entries VDB-100957, VDB-100958, VDB-100960 and VDB-100961 are related to this item. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Product
Type
Vendor
Name
Version
License
Support
CPE 2.3
CPE 2.2
CVSSv4
VulDB Vector: 🔍VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 8.5VulDB Meta Temp Score: 8.4
VulDB Base Score: 7.3
VulDB Temp Score: 7.0
VulDB Vector: 🔍
VulDB Reliability: 🔍
NVD Base Score: 9.8
NVD Vector: 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Memory corruptionCWE: CWE-119
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Yes
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | unlock | unlock | unlock | unlock |
|---|---|---|---|---|
| Today | unlock | unlock | unlock | unlock |
Nessus ID: 100052
Nessus Name: Adobe Flash Player <= 25.0.0.148 Multiple Vulnerabilities (APSB17-15)
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
OpenVAS ID: 800035
OpenVAS Name: Adobe Flash Player Security Updates( apsb17-15 )-Windows
OpenVAS File: 🔍
OpenVAS Family: 🔍
Qualys ID: 🔍
Qualys Name: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Timeline
12/02/2016 🔍05/09/2017 🔍
05/09/2017 🔍
05/09/2017 🔍
05/09/2017 🔍
05/09/2017 🔍
05/09/2017 🔍
05/09/2017 🔍
12/06/2022 🔍
Sources
Vendor: adobe.comAdvisory: RHSA-2017:1219
Researcher: Natalie Silvanovich
Organization: Google Project Zero
Status: Not defined
Confirmation: 🔍
CVE: CVE-2017-3070 (🔍)
GCVE (CVE): GCVE-0-2017-3070
GCVE (VulDB): GCVE-100-100959
OVAL: 🔍
SecurityFocus: 98349 - Adobe Flash Player APSB17-15 Multiple Memory Corruption Vulnerabilities
OSVDB: - CVE-2017-3070 - Adobe - Flash Player - Memory Corruption Issue
SecurityTracker: 1038427
See also: 🔍
Entry
Created: 05/09/2017 11:02 PMUpdated: 12/06/2022 09:10 AM
Changes: 05/09/2017 11:02 PM (74), 09/24/2020 06:23 PM (9), 12/22/2020 02:51 PM (2), 12/06/2022 09:10 AM (3)
Complete: 🔍
Cache ID: 18:4C1:40
No comments yet. Languages: en.
Please log in to comment.