PT-2016-3359 · Adobe+3 · Flash Player+3

Publicado 2016-10-26 · Atualizado 2025-02-14 · CVE-2016-7855

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 23.0.0.205 on Windows and OS X Adobe Flash Player versions prior to 11.2.202.643 on Linux

Description A use-after-free issue in Adobe Flash Player allows remote attackers to execute arbitrary code via unspecified vectors. This issue has been exploited in the wild in October 2016.

Recommendations For Adobe Flash Player versions prior to 23.0.0.205 on Windows and OS X, update to version 23.0.0.205 or later. For Adobe Flash Player versions prior to 11.2.202.643 on Linux, update to version 11.2.202.643 or later. As a temporary workaround, consider disabling Adobe Flash Player until a patch is available.

Correção

RCE

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2016-2203

ALT-PU-2016-2204

BDU:2021-05439

CVE-2016-7855

MGASA-2016-0360

OPENSUSE-SU-2016_2663-1

OPENSUSE-SU-2016_2665-1

RHSA-2016:2119

RHSA-2016_2119

SUSE-SU-2016:2662-1

SUSE-SU-2016_2662-1

Produtos afetados

Alt Linux

Flash Player

Red Hat

Suse

Referências · 24

• https://helpx.adobe.com/security/products/flash-player/apsb16-36.html · Aviso do Fabricante
• https://t.me/cvenotify/111429 · Publicação no Telegram
• https://cve.org/CVERecord?id=CVE-2016-7855 · Nota de Segurança
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7855 · Nota
• https://osv.dev/vulnerability/MGASA-2016-0360 · Aviso do Fabricante
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-128 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=19664 · Nota
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Nota
• http://securityfocus.com/bid/93861 · Nota
• https://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html · Nota
• https://osv.dev/vulnerability/CVE-2016-7855 · Aviso do Fabricante
• https://security.gentoo.org/glsa/201610-10 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-7855 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2016-2119.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-7855 · Nota