← All CVEs

CVE-2017-3078

critical · 9.8

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) module. Successful exploitation could lead to arbitrary code execution.

9.8
CVSS
30.9%
EPSS (exploit prob.)
98th
EPSS percentile
2017-06-20
Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
adobeflash_player<= 25.0.0.171
adobeflash_player<= 25.0.0.171
microsoftwindows_10all versions
microsoftwindows_8.1all versions
adobeflash_player<= 25.0.0.171
applemac_os_xall versions
googlechrome_osall versions
linuxlinux_kernelall versions
microsoftwindowsall versions
adobeflash_player<= 25.0.0.171
applemac_os_xall versions
linuxlinux_kernelall versions
microsoftwindowsall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-3078