PT-2016-3359 · Adobe+3 · Flash Player+3

Published 2016-10-26 · Updated 2025-02-14 · CVE-2016-7855

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 23.0.0.205 on Windows and OS X Adobe Flash Player versions prior to 11.2.202.643 on Linux

Description A use-after-free issue in Adobe Flash Player allows remote attackers to execute arbitrary code via unspecified vectors. This issue has been exploited in the wild in October 2016.

Recommendations For Adobe Flash Player versions prior to 23.0.0.205 on Windows and OS X, update to version 23.0.0.205 or later. For Adobe Flash Player versions prior to 11.2.202.643 on Linux, update to version 11.2.202.643 or later. As a temporary workaround, consider disabling Adobe Flash Player until a patch is available.

Fix

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2016-2203

ALT-PU-2016-2204

BDU:2021-05439

CVE-2016-7855

MGASA-2016-0360

OPENSUSE-SU-2016_2663-1

OPENSUSE-SU-2016_2665-1

RHSA-2016:2119

RHSA-2016_2119

SUSE-SU-2016:2662-1

SUSE-SU-2016_2662-1

Affected Products

Alt Linux

Flash Player

Red Hat

Suse

References · 24

• https://helpx.adobe.com/security/products/flash-player/apsb16-36.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-7855 · Security Note
• https://osv.dev/vulnerability/MGASA-2016-0360 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-128 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-7855 · Vendor Advisory
• https://security.gentoo.org/glsa/201610-10 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-7855 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2119.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0360.html · Security Note
• https://bdu.fstec.ru/vul/2021-05439 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-7855 · Security Note
• https://ubuntu.com/security/CVE-2016-7855 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2662-1 · Vendor Advisory
• https://t.me/cvenotify/111429 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7855 · Note