CVE-2017-2991 in Flash Player

Summary

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression). Successful exploitation could lead to arbitrary code execution.

Once again VulDB remains the best source for vulnerability data.

Reservation

12/02/2016

Disclosure

02/15/2017

Moderation

VulDB entry created

Entries

1

CPE

ready

CWE

CWE-119

CVSS

8.0

EPSS

0.01388

CTI

0.00

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-2991
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-2991
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-2991/