high8.8Public exploit code
CVE-2016-4273
Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adobe Flash Player 23.0.0.162 - '.SWF' ConstantPool Critical Memory Corruption2016-10-12 · dos · multiple · Verified
Impact
Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Flash Player | through 23.0.0.162 through 18.0.0.375 through 11.2.202.635 |
| Adobe | Flash Player Desktop Runtime | through 23.0.0.162 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2016-2057.html
- http://www.securityfocus.com/bid/93490
- http://www.securitytracker.com/id/1036985
- https://helpx.adobe.com/security/products/flash-player/apsb16-32.html
- https://security.gentoo.org/glsa/201610-10
- https://www.exploit-db.com/exploits/40510/
- http://rhn.redhat.com/errata/RHSA-2016-2057.html
- http://www.securityfocus.com/bid/93490
- http://www.securitytracker.com/id/1036985
- https://helpx.adobe.com/security/products/flash-player/apsb16-32.html
- https://security.gentoo.org/glsa/201610-10
- https://www.exploit-db.com/exploits/40510/