flash-plugin: multiple code execution issues fixed in APSB17-15

🗓️ 09 May 2017 20:45:47Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 2 Views

Flash plugin fixes use-after-free and code execution issues in APSB17-15 for version 25.0.0.148 and earlier.

Reporter	Title	Published	Views	Family All 72
Tenable Nessus	Flash Player < 25.0.0.171 Multiple RCE (APSB17-15)	11 May 201700:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 25.0.0.148 Multiple Vulnerabilities (APSB17-15)	9 May 201700:00	–	nessus
Tenable Nessus	GLSA-201705-12 : Adobe Flash Player: Multiple vulnerabilities	26 May 201700:00	–	nessus
Tenable Nessus	Adobe Flash Player for Mac <= 25.0.0.163 Multiple Vulnerabilities (APSB17-15)	9 May 201700:00	–	nessus
Tenable Nessus	RHEL 6 : flash-plugin (RHSA-2017:1219)	10 May 201700:00	–	nessus
Tenable Nessus	KB4020821: Security update for Adobe Flash Player (May 2017)	9 May 201700:00	–	nessus
Tenable Nessus	SUSE SLED12 Security Update : flash-player (SUSE-SU-2017:1238-1)	11 May 201700:00	–	nessus
ArchLinux	[ASA-201705-8] flashplugin: arbitrary code execution	9 May 201700:00	–	archlinux
ArchLinux	[ASA-201705-9] lib32-flashplugin: arbitrary code execution	9 May 201700:00	–	archlinux
BDU FSTEC	The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code	22 May 201700:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	6	any	flash-plugin	0:25.0.0.171-1.el6_9.i686	flash-plugin-0:25.0.0.171-1.el6_9.i686.noarch.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2017-3073
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
helpx	www.helpx.adobe.com/security/products/flash-player/apsb17-15.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-3073
cve	www.cve.org/CVERecord

13 May 2026 01:11Current

7.7High risk

Vulners AI Score7.7

CVSS 3.18.8

CVSS 29.3

EPSS0.0486

flash plugin use after free code execution version 25.0.0.148 versions up to