CVE-2017-2990 in Flash Player

Summary

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. Successful exploitation could lead to arbitrary code execution.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 12/02/2016
• Disclosure: 02/15/2017
• Moderation: VulDB entry created
• Entries: 1: VDB-96964
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 8.0
• EPSS: 0.02260
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-2990
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-2990
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-2990/