CVE-2017-2995

Source
https://cve.org/CVERecord?id=CVE-2017-2995
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-2995.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-2995
Downstream
Related
Published
2017-02-15T06:59:00.823Z
Modified
2026-04-16T06:21:25.053658911Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class. Successful exploitation could lead to arbitrary code execution.

References

Affected packages

Git /

Affected ranges

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-2995.json"
unresolved_ranges
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "24.0.0.194"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "24.0.0.194"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "24.0.0.194"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "24.0.0.194"
            }
        ]
    }
]