CVE-2017-3112

N/A

Published: December 9, 2017 at 06:00 AM UTC

Updated: June 17, 2026 at 01:17 AM UTC

4 products affected across 2 vendorsEnterprise Linux DesktopEnterprise Linux ServerEnterprise Linux Workstation· also runs on 6 platforms

Using Adobe Flash Player 27.0.0.183 and earlier versions by N/A?

Get instant alerts when new vulnerabilities affect Adobe Flash Player 27.0.0.183 and earlier versions - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 6%

Description

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of AdobePSDK metadata. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Flash Player · Adobe

95%

v ≤ 27.0.0.18327.0.0.183

apple-macos (environment) · google-chrome-os (environment) · linux-linux-kernel (environment) · microsoft-windows (environment) · microsoft-windows-10 (environment) · microsoft-windows-8-1 (environment)

Enterprise Linux Desktop · Red Hatrubygems

95%

6.0

Enterprise Linux Server · Red Hatrubygems

95%

6.0

Enterprise Linux Workstation · Red Hatrubygems

95%

6.0