CVE-2016-7892

Adobe Flash Player Use-After-Free Vulnerability

Flash Player Desktop Runtime

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.

15. Dez 2016

Ausgewertete Quellen

• Microsoft
  https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154
• Red Hat
  http://rhn.redhat.com/errata/RHSA-2016-2947.html
• Hersteller
  https://helpx.adobe.com/security/products/flash-player/apsb16-39.html
• Hinweis
  http://www.securityfocus.com/bid/94877
• Hinweis
  http://www.securitytracker.com/id/1037442
• Hinweis
  https://security.gentoo.org/glsa/201701-17
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7892
• CISA
  Adobe Flash Player Use-After-Free Vulnerability
• NVD
  CVE-2016-7892