PT-2016-7411 · Adobe · Animate

Hyp3Rlinx + 1 · Published 2016-12-15 · Updated 2018-10-09 · CVE-2016-7866

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Animate versions 15.2.1.95 and earlier

Description The issue is related to a memory corruption vulnerability that can be exploited, potentially leading to arbitrary code execution.

Recommendations For Adobe Animate versions 15.2.1.95 and earlier, update to a version later than 15.2.1.95 to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2016-7866

Affected Products

Animate

References · 9

• 🔥 https://exploit-db.com/exploits/40915 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-7866 · Security Note
• https://osv.dev/vulnerability/CVE-2016-7866 · Vendor Advisory
• https://helpx.adobe.com/security/products/animate/apsb16-38.html · Vendor Advisory
• http://hyp3rlinx.altervista.org/advisories/ADOBE-ANIMATE-MEMORY-CORRUPTION-VULNERABILITY.txt · Note
• http://securityfocus.com/archive/1/539923/100/0/threaded · Note
• http://securityfocus.com/bid/94872 · Note
• http://packetstormsecurity.com/files/140164/Adobe-Animate-15.2.1.95-Buffer-Overflow.html · Note
• http://seclists.org/fulldisclosure/2016/Dec/45 · Note