PT-2016-2958 · Adobe+3 · Flash Player+3

Wanderingglitch

·

Publicado

2016-12-13

·

Atualizado

2022-11-16

·

CVE-2016-7870

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 23.0.0.207 and earlier Adobe Flash Player versions 11.2.202.644 and earlier
Description The issue is caused by a buffer boundary violation in the RegExp class for specific search strategies in the Flash Player platform. This can allow a remote attacker to execute arbitrary code.
Recommendations For Adobe Flash Player versions 23.0.0.207 and earlier, update to a version later than 23.0.0.207 to resolve the issue. For Adobe Flash Player versions 11.2.202.644 and earlier, update to a version later than 11.2.202.644 to resolve the issue.

Correção

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-124CWE-787

Identificadores relacionados

ALT-PU-2016-2445
BDU:2016-02389
BDU:2017-00012
CVE-2016-7870
MGASA-2017-0014
RHSA-2016:2947
RHSA-2016_2947
SUSE-SU-2016:3148-1
ZDI-16-623

Produtos afetados

Alt Linux
Flash Player
Red Hat
Suse