NetSight
IP …
high8.8Public exploit code

CVE-2016-1001

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors.

Affected products

VendorProductAffected versions
AdobeFlash Player
through 20.0.0.306
through 11.2.202.569
AdobeAir
through 20.0.0.233
AdobeAir Sdk
through 20.0.0.260
SamsungX14j Firmware
Version t-ms14jakucb-1102.5
AdobeFlash Player Desktop Runtime
through 20.2.2.306
AdobeAir Desktop Runtime
through 20.0.0.260
AdobeAir Sdk \& Compiler
through 20.0.0.260

Weakness classification

CWE-787

References