Design/Logic Flaw

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects, aka memory corruption. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3068

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine. Successful exploitation could lead to arbitrary code execution...

UBUNTU-CVE-2017-3070

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3069

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class. Successful exploitation could lead to arbitrary code execution...

UBUNTU-CVE-2017-3069

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3073

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects, aka memory corruption. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3070

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3069

Adobe Flash Player versions 25.0.0.148 and earlier contain a memory corruption vulnerability in the BlendMode class (CVE-2017-3069) that could lead to arbitrary code execution. The issue is addressed by upgrading to 25.0.0.171 or later (per advisory block references) across affected platforms. Ex...

CVE-2017-3073

CVE-2017-3073 affects Adobe Flash Player 25.0.0.148 and earlier, with an exploitable use-after-free vulnerability when handling multiple mask properties of display objects, leading to memory corruption and potential arbitrary code execution. Multiple connected advisories confirm the affected comp...

CVE-2017-3068

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3071

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3068

CVE-2017-3068 is an Adobe Flash Player vulnerability affecting versions up to 25.0.0.148 (and earlier) where memory corruption in the Advanced Video Coding (AVC) engine could allow an attacker to execute arbitrary code. Several advisories note a remote code-execution risk via crafted SWF content ...

CVE-2017-3072

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3074

Adobe Flash Player 25.0.0.148 and earlier is affected by a memory corruption vulnerability in the Graphics class (CVE-2017-3074). Successful exploitation could lead to arbitrary code execution. Public advisories indicate remediation via upgrading to at least 25.0.0.171 (and related CVEs 3068–3074...

CVE-2017-3072

Adobe Flash Player vulnerability CVE-2017-3072 is described as an exploitable memory corruption in the BitmapData class in Flash Player 25.0.0.148 and earlier, with successful exploitation potentially leading to arbitrary code execution. The connected advisories corroborate multiple related CVEs ...

CVE-2017-3069

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3074

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3070

Adobe Flash Player 25.0.0.148 and earlier is affected by CVE-2017-3070 due to a memory corruption flaw in the ConvolutionFilter class, which could allow arbitrary code execution if exploited. Affected software versions include 25.0.0.148 and earlier; remediation across vendors is to upgrade to 25...

CVE-2017-3071

Adobe Flash Player (Flash Player) vulnerable in versions up to 25.0.0.148 due to a use-after-free in masking display objects, enabling arbitrary code execution on successful exploitation. Connected advisories show patches upgrading to 25.0.0.171 (e.g., APSB17-15) and related fixes. Practical reme...

Adobe Patches Seven Critical Vulnerabilities in Flash, AEM

Adobe fixed eight vulnerabilities, seven critical, in Flash Player and its Adobe Experience Manager AEM Forms product as part of a regularly scheduled update Tuesday morning. All seven of the Flash Player bugs can lead to code execution and should be considered critical, according to a security...