Not rated

CVE-2016-7879 Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free…

Description

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the NetConnection class when handling an attached script object. Successful exploitation could lead to arbitrary code execution.

Affected products and versions

Product	Affected versions	Fixed in
Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier	Versions not published

References

www.zerodayinitiative.com www.zerodayinitiative.com
SUSE-SU-2016:3148 lists.opensuse.org
MS16-154 docs.microsoft.com
GLSA-201701-17 security.gentoo.org
94873 www.securityfocus.com
1037442 www.securitytracker.com
RHSA-2016:2947 rhn.redhat.com
helpx.adobe.com helpx.adobe.com
openSUSE-SU-2016:3160 lists.opensuse.org

Timeline

Published December 15, 2016
Last modified August 6, 2024

The 17 CVEs of Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier →

CVE-2016-7875 Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow… Not rated CVE-2016-7892 Adobe Flash Player Use-After-Free Vulnerability 8.8 High CVE-2016-7869 Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow /… Not rated CVE-2016-7868 Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow /… Not rated

Track this CVE