high8.8Public exploit code
CVE-2016-4275
Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adobe Flash - Crash When Freeing Memory After AVC decoding2016-09-23 · dos · multiple · Verified
Impact
Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Flash Player | through 11.2.202.632 through 22.0.0.211 through 18.0.0.366 |
| Adobe | Flash Player Desktop Runtime | through 22.0.0.211 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2016-1865.html
- http://www.securityfocus.com/bid/92930
- http://www.securitytracker.com/id/1036791
- https://helpx.adobe.com/security/products/flash-player/apsb16-29.html
- https://security.gentoo.org/glsa/201610-10
- https://www.exploit-db.com/exploits/40421/
- http://rhn.redhat.com/errata/RHSA-2016-1865.html
- http://www.securityfocus.com/bid/92930
- http://www.securitytracker.com/id/1036791
- https://helpx.adobe.com/security/products/flash-player/apsb16-29.html
- https://security.gentoo.org/glsa/201610-10
- https://www.exploit-db.com/exploits/40421/