PT-2016-1488 · Adobe+3 · Flash Player Esr+5
Fujibayashi Kyo
·
Publicado
2016-03-10
·
Atualizado
2023-01-19
·
CVE-2016-0996
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Adobe Flash Player (affected versions not specified)
Adobe Flash Player ESR (affected versions not specified)
Adobe Integrated Runtime (affected versions not specified)
Description
The issue is related to a use-after-free vulnerability in the setInterval method of the affected software. This could allow a remote attacker to execute arbitrary code.
Recommendations
For Adobe Flash Player, consider disabling the setInterval method until a patch is available.
For Adobe Flash Player ESR, restrict the use of the setInterval function to minimize the risk of exploitation.
For Adobe Integrated Runtime, avoid using the setInterval method in sensitive operations until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Flash Player
Flash Player Esr
Integrated Runtime
Red Hat
Suse