CVE-2016-1015

 

Published at: - 09-04-2016 03:59

Last modified: - 30-01-2023 07:14

Total changes: - 13

Description

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code by overriding NetConnection object properties to leverage an unspecified "type confusion," a different vulnerability than CVE-2016-1019.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• http://www.zerodayinitiative.com/advisories/ZDI-16-227/
• https://helpx.adobe.com/security/products/flash-player/apsb16-10.html
• RHSA-2016:0610-Third Party Advisory
• SUSE-SU-2016:1305-Broken Link, Third Party Advisory
• openSUSE-SU-2016:1306-Broken Link, Third Party Advisory
• 1035509-Broken Link, Third Party Advisory, VDB Entry
• 85930-Broken Link, Third Party Advisory, VDB Entry
• MS16-050-Patch, Third Party Advisory

 

Keywords

NVD

 

CVE-2016-1015

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures