CVE-2017-2985

高危 8.8CVE-2017-2985 · Published 15/02/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
flash player adobe	`≤ 24.0.0.194`	No fix yet
flash player desktop runtime adobe	`≤ 24.0.0.194`	No fix yet

Description

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. Successful exploitation could lead to arbitrary code execution.

References

rhn.redhat.com/errata/RHSA-2017-0275.html · Third Party Advisory
securityfocus.com/bid/96199 · Broken Link
securitytracker.com/id/1037815 · Broken Link
helpx.adobe.com/security/products/flash-player/apsb17-04.html · Patch
security.gentoo.org/glsa/201702-20 · Third Party Advisory
exploit-db.com/exploits/41422 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free