PT-2016-7411 · Adobe · Animate

Hyp3Rlinx + 1 · Publicado 2016-12-15 · Atualizado 2018-10-09 · CVE-2016-7866

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Animate versions 15.2.1.95 and earlier

Description The issue is related to a memory corruption vulnerability that can be exploited, potentially leading to arbitrary code execution.

Recommendations For Adobe Animate versions 15.2.1.95 and earlier, update to a version later than 15.2.1.95 to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-7866

Produtos afetados

Animate

Referências · 9

• 🔥 https://exploit-db.com/exploits/40915 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-7866 · Nota de Segurança
• http://hyp3rlinx.altervista.org/advisories/ADOBE-ANIMATE-MEMORY-CORRUPTION-VULNERABILITY.txt · Nota
• http://securityfocus.com/archive/1/539923/100/0/threaded · Nota
• http://securityfocus.com/bid/94872 · Nota
• http://packetstormsecurity.com/files/140164/Adobe-Animate-15.2.1.95-Buffer-Overflow.html · Nota
• https://osv.dev/vulnerability/CVE-2016-7866 · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2016/Dec/45 · Nota
• https://helpx.adobe.com/security/products/animate/apsb16-38.html · Aviso do Fabricante