CVE-2017-3112

An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of AdobePSDK metadata. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.

• CWE-125

• http://www.securityfocus.com/bid/101837Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039778Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:3222Third Party Advisory, VDB Entry
• https://helpx.adobe.com/security/products/flash-player/apsb17-33.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201711-13Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/101837Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039778Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:3222Third Party Advisory, VDB Entry
• https://helpx.adobe.com/security/products/flash-player/apsb17-33.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201711-13Third Party Advisory, VDB Entry

Published

Dec 9, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3106Adobe Flash Player versions 26.0.0.137 and earlier have an e…8.8
• CVE-2017-3107Adobe Experience Manager 6.3 and earlier has a misconfigurat…
• CVE-2017-3108Adobe Experience Manager 6.2 and earlier has a malicious fil…
• CVE-2017-3109An issue was discovered in Adobe Experience Manager 6.3, 6.2…
• CVE-2017-3110Adobe Experience Manager 6.1 and earlier has a sensitive dat…
• CVE-2017-3111An issue was discovered in Adobe Experience Manager 6.3, 6.2…
• CVE-2017-3113Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30…
• CVE-2017-3114An issue was discovered in Adobe Flash Player 27.0.0.183 and…
• CVE-2017-3115Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30…
• CVE-2017-3116Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30…
• CVE-2017-3117Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30…
• CVE-2017-3118Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30…