Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class. Successful exploitation could lead to memory address disclosure.

Versions of Adobe Flash Player prior to 26.0.0.137 are unpatched, and therefore affected by the following vulnerabilities :

 - An information disclosure vulnerability exists due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a website containing specially crafted Flash content, to disclose sensitive information. (CVE-2017-3080)
 - A remote code execution vulnerability exists due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a website containing specially crafted Flash content, to execute arbitrary code. (CVE-2017-3099)
 - An information disclosure vulnerability exists that allows an unauthenticated, remote attacker to corrupt memory and disclose memory addresses. (CVE-2017-3100)

The remote host is affected by the vulnerability described in GLSA-201707-15 (Adobe Flash Player: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

Adobe reports :

- These updates resolve security bypass vulnerability that could lead to information disclosure (CVE-2017-3080).

- These updates resolve memory corruption vulnerability that could lead to remote code execution (CVE-2017-3099).

- These updates resolve memory corruption vulnerability that could lead to memory address disclosure (CVE-2017-3100).

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

This update upgrades Flash Player to version 26.0.0.137.

Security Fix(es) :

* This update fixes multiple vulnerabilities in Adobe Flash Player.
These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content.
(CVE-2017-3080, CVE-2017-3099, CVE-2017-3100)

The remote Windows host is missing security update KB4025376. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists due to an     unspecified flaw. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     website containing specially crafted Flash content, to     disclose sensitive information. (CVE-2017-3080)

  - A remote code execution vulnerability exists due to     improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a website containing     specially crafted Flash content, to execute arbitrary     code. (CVE-2017-3099)

  - An information disclosure vulnerability exists that     allows an unauthenticated, remote attacker to corrupt     memory and disclose memory addresses. (CVE-2017-3100)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 26.0.0.131. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists due to an     unspecified flaw. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     website containing specially crafted Flash content, to     disclose sensitive information. (CVE-2017-3080)

  - A remote code execution vulnerability exists due to     improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a website containing     specially crafted Flash content, to execute arbitrary     code. (CVE-2017-3099)

  - An information disclosure vulnerability exists that     allows an unauthenticated, remote attacker to corrupt     memory and disclose memory addresses. (CVE-2017-3100)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 26.0.0.131. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists due to an     unspecified flaw. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     website containing specially crafted Flash content, to     disclose sensitive information. (CVE-2017-3080)

  - A remote code execution vulnerability exists due to     improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a website containing     specially crafted Flash content, to execute arbitrary     code. (CVE-2017-3099)

  - An information disclosure vulnerability exists that     allows an unauthenticated, remote attacker to corrupt     memory and disclose memory addresses. (CVE-2017-3100)

ID	Name	Product	Family	Severity
700423	Flash Player < 26.0.0.137 Multiple Vulnerabilities (APSB17-21)	Nessus Network Monitor	Web Clients	high
101924	GLSA-201707-15 : Adobe Flash Player: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	critical
101542	FreeBSD : Flash Player -- multiple vulnerabilities (a03e043a-67f1-11e7-beff-6451062f0f7a)	Nessus	FreeBSD Local Security Checks	critical
101518	RHEL 6 : flash-plugin (RHSA-2017:1731)	Nessus	Red Hat Local Security Checks	critical
101370	KB4025376: Security update for Adobe Flash Player (July 2017)	Nessus	Windows : Microsoft Bulletins	critical
101363	Adobe Flash Player for Mac <= 26.0.0.131 Multiple Vulnerabilities (APSB17-21)	Nessus	MacOS X Local Security Checks	critical
101362	Adobe Flash Player <= 26.0.0.131 Multiple Vulnerabilities (APSB17-21)	Nessus	Windows	critical

Detections

Analytics

CVE-2017-3100

medium

Tenable Plugins

high

critical

critical

critical

critical

critical

critical