CVE-2016-0998

 

Published at: - 12-03-2016 04:59

Last modified: - 22-11-2022 05:52

Total changes: - 7

Description

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0999, and CVE-2016-1000.

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://helpx.adobe.com/security/products/flash-player/apsb16-08.html
• 84312-
• 1035251-
• SUSE-SU-2016:0716-
• GLSA-201603-07-
• openSUSE-SU-2016:0719-
• SUSE-SU-2016:0715-
• openSUSE-SU-2016:0734-
• 39631-
• 39612-

 

Keywords

NVD

 

CVE-2016-0998

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures