CVE-2017-3106

HIGH 8.8CVE-2017-3106 · Published 11/08/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
flash player adobe	`≤ 26.0.0.137`	No fix yet
flash player desktop runtime adobe	`≤ 26.0.0.137`	No fix yet

Description

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.

References

securityfocus.com/bid/100190 · Third Party Advisory
securitytracker.com/id/1039088 · Broken Link
access.redhat.com/errata/RHSA-2017:2457 · Third Party Advisory
helpx.adobe.com/security/products/flash-player/apsb17-23.html · Patch
security.gentoo.org/glsa/201709-16 · Third Party Advisory
exploit-db.com/exploits/42480 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free