8.8
Élevée
Exploitée
CVE-2016-7892 Adobe Flash Player Use-After-Free Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
The impacted product is end-of-life and should be disconnected if still in use.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-416
Description
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier | Versions non publiées |
Références
- SUSE-SU-2016:3148 lists.opensuse.org
- MS16-154 docs.microsoft.com
- GLSA-201701-17 security.gentoo.org
- 1037442 www.securitytracker.com
- RHSA-2016:2947 rhn.redhat.com
- helpx.adobe.com helpx.adobe.com
- 94877 www.securityfocus.com
- openSUSE-SU-2016:3160 lists.opensuse.org
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier
Les 17 CVE de Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier →
CVE-2016-7875
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow…
Non notée
CVE-2016-7869
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow /…
Non notée
CVE-2016-7876
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption…
Non notée
CVE-2016-7868
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow /…
Non notée