NetSight
high8.8Public exploit code

CVE-2016-1013

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Lin…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.

Affected products

VendorProductAffected versions
AdobeFlash Player
through 11.2.202.577
through 18.0.0.333
through 21.0.0.197
AdobeFlash Player Desktop Runtime
through 21.0.0.197
AdobeAir Desktop Runtime
through 21.0.0.176
AdobeAir Sdk
through 21.0.0.176
AdobeAir Sdk \& Compiler
through 21.0.0.176

Weakness classification

References