Back to feed
EUVD-2016-8714 · Published Nov 8, 2016
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
Technologies
Linux Linux KernelAdobe Flash Player For LinuxMicrosoft WindowsRedhat Enterprise Linux WorkstationMicrosoft Windows Server 2016Microsoft Windows Server 2012Microsoft Windows Rt 8.1Adobe Flash PlayerMicrosoft Windows 10Microsoft Windows 8.1Google Chrome OsRedhat Enterprise Linux ServerApple Mac Os XRedhat Enterprise Linux Desktop
Weaknesses
CWE-704
CVSS scores
- v3.08.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - v2.09.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://rhn.redhat.com/errata/RHSA-2016-2676.html
- http://www.securityfocus.com/bid/94151
- http://www.securitytracker.com/id/1037240
- http://www.zerodayinitiative.com/advisories/ZDI-16-598
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-141
- https://helpx.adobe.com/security/products/flash-player/apsb16-37.html
Potentially impacted assets
See if this affects your attack surface
