Memory Corruption Vulnerability in Adobe Flash Player's Primetime TVSDK API
CVE-2017-2998

8.8HIGH

Key Information:

Vendor

Adobe
Status
Adobe Flash Player 24.0.0.221 And Earlier.
Vendor
CVE Published:
14 March 2017

What is CVE-2017-2998?

Adobe Flash Player versions 24.0.0.221 and earlier contain a vulnerability in the Primetime TVSDK API that can be exploited through timeline interactions, potentially allowing an attacker to execute arbitrary code. This vulnerability poses significant security risks, enabling unauthorized access and control over the affected systems, making it essential for users to apply necessary patches promptly.

Affected Version(s)

Adobe Flash Player 24.0.0.221 and earlier. Adobe Flash Player 24.0.0.221 and earlier.

References

https://helpx.adobe.com/security/products/flash-player/ap...
x_refsource_CONFIRM
https://security.gentoo.org/glsa/201703-02
vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/96866
vdb-entryx_refsource_BID

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2017-2998 : Memory Corruption Vulnerability in Adobe Flash Player's Primetime TVSDK API