ID:129 - Exploit for Information disclosure in Adobe Flash Player and Adobe Flash Player for Linux - CVE-2017-3000

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to obtain potentially sensitive data.

The vulnerability exists due to boundary error in random number generator used for constant blinding in Adobe Flash Player. A remote unauthenticated attacker can create a specially crafted .swf file, trick the victim into opening i, trigger buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in disclosure of potentially sensitive data.

Remediation