Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Advisory: Adobe Flash Player 24.0.0.221 and earlier. — GLSA-201703-02 Clear all filters
TI-2017-02223 CVE-2017-3003 · GHSA-3hf8-m65w-793g

Use after free in Adobe Flash Player 24.0.0.221 and earlier.

Priority MEDIUM 46

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05254 Published 2017-03-14 Partial fix CWE-416
TI-2017-02222 CVE-2017-3002 · GHSA-27h4-gxf8-4gg7

Use after free in Adobe Flash Player 24.0.0.221 and earlier.

Priority MEDIUM 46

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05099 Published 2017-03-14 Partial fix CWE-416
TI-2017-02221 CVE-2017-3001 · GHSA-f273-f358-rg3v

Use after free in Adobe Flash Player 24.0.0.221 and earlier.

Priority MEDIUM 46

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05099 Published 2017-03-14 Partial fix CWE-416
TI-2017-02219 CVE-2017-2999 · GHSA-ggwr-6xg7-m7g8

Out-of-bounds write in Adobe Flash Player 24.0.0.221 and earlier.

Priority MEDIUM 45

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04101 Published 2017-03-14 Partial fix CWE-787
TI-2017-02218 CVE-2017-2998 · GHSA-9mf8-jm57-rfw8

Out-of-bounds write in Adobe Flash Player 24.0.0.221 and earlier.

Priority MEDIUM 45

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04066 Published 2017-03-14 Partial fix CWE-787
TI-2017-02217 CVE-2017-2997 · GHSA-4vhw-m4wv-jrr8

Memory corruption in Adobe Flash Player 24.0.0.221 and earlier.

Priority MEDIUM 48

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07404 Published 2017-03-14 Partial fix CWE-119