CVE-2017-3106

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.

• CWE-704

• http://www.securityfocus.com/bid/100190Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039088Broken Link, Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:2457Third Party Advisory
• https://helpx.adobe.com/security/products/flash-player/apsb17-23.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201709-16Third Party Advisory
• https://www.exploit-db.com/exploits/42480/Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/100190Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039088Broken Link, Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:2457Third Party Advisory
• https://helpx.adobe.com/security/products/flash-player/apsb17-23.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201709-16Third Party Advisory
• https://www.exploit-db.com/exploits/42480/Exploit, Third Party Advisory, VDB Entry

Published

Aug 11, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3100Adobe Flash Player versions 26.0.0.131 and earlier have an e…6.5
• CVE-2017-3101Adobe Connect versions 9.6.1 and earlier have a clickjacking…
• CVE-2017-3102Adobe Connect versions 9.6.1 and earlier have a reflected cr…
• CVE-2017-3103Adobe Connect versions 9.6.1 and earlier have a stored cross…
• CVE-2017-3104Adobe RoboHelp has a cross-site scripting (XSS) vulnerabilit…
• CVE-2017-3105Adobe RoboHelp has an Open Redirect vulnerability. This affe…
• CVE-2017-3107Adobe Experience Manager 6.3 and earlier has a misconfigurat…
• CVE-2017-3108Adobe Experience Manager 6.2 and earlier has a malicious fil…
• CVE-2017-3109An issue was discovered in Adobe Experience Manager 6.3, 6.2…
• CVE-2017-3110Adobe Experience Manager 6.1 and earlier has a sensitive dat…
• CVE-2017-3111An issue was discovered in Adobe Experience Manager 6.3, 6.2…
• CVE-2017-3112An issue was discovered in Adobe Flash Player 27.0.0.183 and…