critical9.8
CVE-2016-4121
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Lin…
Impact
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1097, CVE-2016-1106, CVE-2016-1107, CVE-2016-1108, CVE-2016-1109, CVE-2016-1110, CVE-2016-4108, and CVE-2016-4110.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Flash Player | through 21.0.0.241 through 18.0.0.343 through 11.2.202.616 through 21.0.0.216 |
| Adobe | Air Sdk \& Compiler | through 21.0.0.198 |
| Adobe | Air Sdk | through 21.0.0.198 |
| Adobe | Flash Player Desktop Runtime | through 21.0.0.226 |
| Adobe | Air Desktop Runtime | through 21.0.0.198 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2016-1079.html
- http://www.securityfocus.com/bid/90797
- https://helpx.adobe.com/security/products/flash-player/apsb16-15.html
- https://security.gentoo.org/glsa/201606-08
- http://rhn.redhat.com/errata/RHSA-2016-1079.html
- http://www.securityfocus.com/bid/90797
- https://helpx.adobe.com/security/products/flash-player/apsb16-15.html
- https://security.gentoo.org/glsa/201606-08