CVE-2017-3077

CVE Database · CVE-2017-3077

CVE-2017-3077

· N/AModified

CVSS v3.1

N/A

EPSS

22.26%

Published

Jun 20, 2017

Modified

May 12, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBAdobe Flash - Image Decoding Out-of-Bounds Read TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. Successful exploitation could lead to arbitrary code execution.

Weaknesses (CWE)

CWE-119

Affected Products (13)

adobe · flash_playervulnerable

microsoft · windows_10

microsoft · windows_8.1

adobe · flash_playervulnerable

apple · mac_os_x

google · chrome_os

linux · linux_kernel

microsoft · windows

adobe · flash_playervulnerable

apple · mac_os_x

linux · linux_kernel

· windows

References (12)

http://www.securityfocus.com/bid/99025

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038655

https://access.redhat.com/errata/RHSA-2017:1439

https://helpx.adobe.com/security/products/flash-player/apsb17-17.html

Vendor Advisory

https://security.gentoo.org/glsa/201707-15

https://www.exploit-db.com/exploits/42248/

http://www.securityfocus.com/bid/99025

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038655

https://access.redhat.com/errata/RHSA-2017:1439

KEV Catalog EPSS Scores Vendors All CVEs