Microsoft security advisory

ADV170006

May 2017 Adobe Flash Security Update

Related records (7)

TI-2017-02288 CVE-2017-3068 · GHSA-x5qr-f738-x6hv

Out-of-bounds write in Adobe Flash Player 25.0.0.148 and earlier.

MEDIUM 57

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.20353 Published 2017-05-09 Fixed CWE-787

TI-2017-02291 CVE-2017-3071 · GHSA-jfvx-4557-pgcj

Use after free in Adobe Flash Player 25.0.0.148 and earlier.

MEDIUM 47

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0621 Published 2017-05-09 Fixed CWE-416

TI-2017-02294 CVE-2017-3074 · GHSA-vgg2-rxqr-3f72

Out-of-bounds write in Adobe Flash Player 25.0.0.148 and earlier.

MEDIUM 46

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04998 Published 2017-05-09 Fixed CWE-787

TI-2017-02293 CVE-2017-3073 · GHSA-r88h-g29r-792h

Use after free in Adobe Flash Player 25.0.0.148 and earlier.

MEDIUM 46

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects, aka memory corruption.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0486 Published 2017-05-09 Fixed CWE-416

TI-2017-02292 CVE-2017-3072 · GHSA-mfj9-rqfm-mcvg

Out-of-bounds write in Adobe Flash Player 25.0.0.148 and earlier.

MEDIUM 46

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04998 Published 2017-05-09 Fixed CWE-787

TI-2017-02290 CVE-2017-3070 · GHSA-v25h-33j8-h6x5

Out-of-bounds write in Adobe Flash Player 25.0.0.148 and earlier.

MEDIUM 46

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04998 Published 2017-05-09 Fixed CWE-787

TI-2017-02289 CVE-2017-3069 · GHSA-9cj3-pw56-qhh3

Out-of-bounds write in Adobe Flash Player 25.0.0.148 and earlier.

MEDIUM 46

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04998 Published 2017-05-09 Fixed CWE-787