NetSight
IP …
high8.8Public exploit code

CVE-2016-1002

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176,…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, and CVE-2016-1005.

Affected products

VendorProductAffected versions
AdobeFlash Player
through 20.0.0.306
through 11.2.202.569
AdobeAir
through 20.0.0.233
AdobeAir Sdk
through 20.0.0.260
SamsungX14j Firmware
Version t-ms14jakucb-1102.5
AdobeFlash Player Desktop Runtime
through 20.2.2.306
AdobeAir Desktop Runtime
through 20.0.0.260
AdobeAir Sdk \& Compiler
through 20.0.0.260

Weakness classification

CWE-119

References