CVE-2016-0985

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Adobe Flash - textfield Constructor Type Confusion2016-02-17 · dos · multiple · Verified

Impact

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion."

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html
• http://rhn.redhat.com/errata/RHSA-2016-0166.html
• http://www.securitytracker.com/id/1034970
• https://helpx.adobe.com/security/products/flash-player/apsb16-04.html
• https://security.gentoo.org/glsa/201603-07
• https://www.exploit-db.com/exploits/39461/
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html
• http://rhn.redhat.com/errata/RHSA-2016-0166.html
• http://www.securitytracker.com/id/1034970
• https://helpx.adobe.com/security/products/flash-player/apsb16-04.html
• https://security.gentoo.org/glsa/201603-07
• https://www.exploit-db.com/exploits/39461/