high8.8
CVE-2016-7860
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability.
Impact
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Flash Player | through 23.0.0.205 |
| Adobe | Flash Player For Linux | through 11.2.202.643 |
| Redhat | Enterprise Linux Desktop | Versions 5.0, 6.0 |
| Redhat | Enterprise Linux Server | Versions 5.0, 6.0 |
| Redhat | Enterprise Linux Workstation | Versions 5.0, 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2016-2676.html
- http://www.securityfocus.com/bid/94151
- http://www.securitytracker.com/id/1037240
- http://www.zerodayinitiative.com/advisories/ZDI-16-601
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-141
- https://helpx.adobe.com/security/products/flash-player/apsb16-37.html
- https://security.gentoo.org/glsa/201611-18
- http://rhn.redhat.com/errata/RHSA-2016-2676.html
- http://www.securityfocus.com/bid/94151
- http://www.securitytracker.com/id/1037240
- http://www.zerodayinitiative.com/advisories/ZDI-16-601
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-141
- https://helpx.adobe.com/security/products/flash-player/apsb16-37.html
- https://security.gentoo.org/glsa/201611-18