Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. Successful exploitation could lead to arbitrary code execution.

The remote host is affected by the vulnerability described in GLSA-201707-15 (Adobe Flash Player: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

Versions of Adobe Flash Player prior to 26.0.0.126 are unpatched, and therefore affected by the following RCE vulnerabilities :

 - A use-after-free error exists in the XML Load method. The issue is triggered when handling XML objects. With a specially crafted file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code. (CVE-2017-3075)
 - A flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code. (CVE-2017-3076, CVE-2017-3077, CVE-2017-3078, CVE-2017-3079)
 - A use-after-free error exists that may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code. No further details have been provided. (CVE-2017-3081)
 - A flaw exists that is triggered as LocaleID determinePreferredLocales metadata objects are not properly validated. This may allow a context-dependent attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code. (CVE-2017-3082)
 - A use-after-free error exists during profile object handling. With a specially crafted file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code. (CVE-2017-3083)
 - A use-after-free error exists during the cloning of AuditudeSettings objects. With a specially crafted file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code. (CVE-2017-3084)

Adobe reports :

- These updates resolve use-after-free vulnerabilities that could lead to code execution (CVE-2017-3075, CVE-2017-3081, CVE-2017-3083, CVE-2017-3084).

- These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2017-3076, CVE-2017-3077, CVE-2017-3078, CVE-2017-3079, CVE-2017-3082).

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

This update upgrades Flash Player to version 26.0.0.126.

Security Fix(es) :

* This update fixes multiple vulnerabilities in Adobe Flash Player.
These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content.
(CVE-2017-3075, CVE-2017-3076, CVE-2017-3077, CVE-2017-3078, CVE-2017-3079, CVE-2017-3081, CVE-2017-3082, CVE-2017-3083, CVE-2017-3084)

The remote Windows host is missing security update KB4022730. It is, therefore, affected by multiple vulnerabilities :

  - Multiple use-after-free errors exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-3075, CVE-2017-3081, CVE-2017-3083,     CVE-2017-3084)

  - Multiple memory corruption issues exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-3076, CVE-2017-3077, CVE-2017-3078,     CVE-2017-3079, CVE-2017-3082)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 25.0.0.171. It is, therefore, affected by multiple vulnerabilities :

  - Multiple use-after-free errors exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-3075, CVE-2017-3081, CVE-2017-3083,     CVE-2017-3084)

  - Multiple memory corruption issues exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-3076, CVE-2017-3077, CVE-2017-3078,     CVE-2017-3079, CVE-2017-3082)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 25.0.0.171. It is, therefore, affected by multiple vulnerabilities :

  - Multiple use-after-free errors exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-3075, CVE-2017-3081, CVE-2017-3083,     CVE-2017-3084)

  - Multiple memory corruption issues exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-3076, CVE-2017-3077, CVE-2017-3078,     CVE-2017-3079, CVE-2017-3082)

ID	Name	Product	Family	Severity
101924	GLSA-201707-15 : Adobe Flash Player: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	critical
700144	Flash Player < 26.0.0.126 Multiple RCE (APSB17-17)	Nessus Network Monitor	Web Clients	high
100829	FreeBSD : Flash Player -- multiple vulnerabilities (cd944b3f-51f6-11e7-b7b2-001c25e46b1d)	Nessus	FreeBSD Local Security Checks	critical
100778	RHEL 6 : flash-plugin (RHSA-2017:1439)	Nessus	Red Hat Local Security Checks	critical
100766	KB4022730: Security update for Adobe Flash Player (June 2017)	Nessus	Windows : Microsoft Bulletins	critical
100757	Adobe Flash Player for Mac <= 25.0.0.171 Multiple Vulnerabilities (APSB17-17)	Nessus	MacOS X Local Security Checks	critical
100756	Adobe Flash Player <= 25.0.0.171 Multiple Vulnerabilities (APSB17-17)	Nessus	Windows	critical

Detections

Analytics

CVE-2017-3076

critical

Tenable Plugins

critical

high

critical

critical

critical

critical

critical