CVE-2017-2930

HIGH 8.8CVE-2017-2930 · Published 11/01/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
flash player adobe	`≤ 24.0.0.186`	No fix yet

Description

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurrency error when manipulating a display list. Successful exploitation could lead to arbitrary code execution.

References

packetstormsecurity.com/files/140463/Adobe-Flash-24.0.0.186-Code-Execution.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2017-0057.html · Third Party Advisory
securityfocus.com/bid/95350 · Broken Link
securitytracker.com/id/1037570 · Broken Link
cosig.gouv.qc.ca/en/cosig-2017-01-en · Broken Link
helpx.adobe.com/security/products/flash-player/apsb17-02.html · Patch
security.gentoo.org/glsa/201702-20 · Third Party Advisory
exploit-db.com/exploits/41008 · Exploit
exploit-db.com/exploits/41012 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free