CVE-2017-3085

Description

References

• securityfocus.com/bid/100191 · Broken Link
• securitytracker.com/id/1039088 · Broken Link
• zerodayinitiative.com/advisories/ZDI-17-634 · Third Party Advisory
• access.redhat.com/errata/RHSA-2017:2457 · Third Party Advisory
• blog.bjornweb.nl/2017/08/flash-remote-sandbox-escape-windows-user-credentials-leak · Exploit
• helpx.adobe.com/security/products/flash-player/apsb17-23.html · Patch
• security.gentoo.org/glsa/201709-16 · Third Party Advisory

flash player의 다른 취약점

• CVE-2020-9746높음 8.8Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result …
• CVE-2020-9633심각 9.8Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Play…
• CVE-2020-3757높음 8.8Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type c…
• CVE-2019-8075높음 7.5Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lea…
• CVE-2019-8070심각 9.8Adobe Flash Player 32.0.0.238 and earlier versions, 32.0.0.207 and earlier versions have a Use after free vulnerability. Successful exploita…