Уязвимость CVE-2016-0984: Информация

Описание

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.

Важность: HIGH (8,8) Вектор: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Опубликовано: 10 февраля 2016 г.
Изменено: 27 января 2023 г.
Идентификатор типа ошибки: CWE-416

Исправленные пакеты

Имя пакета
Ветка
Исправлено в версии
Версия в репозитории
Errata ID
№ Задания
Состояние
adobe-flash-playerp911-alt5932-alt1110ALT-PU-2016-1088-1158591Исправлено
adobe-flash-playerc9f211-alt5932-alt117ALT-PU-2016-1088-1158591Исправлено

Ссылки на рекомендации, решения и инструменты

Ссылка
Ресурс
https://helpx.adobe.com/security/products/flash-player/apsb16-04.html
  • Patch
  • Vendor Advisory
GLSA-201603-07
  • Third Party Advisory
RHSA-2016:0166
  • Third Party Advisory
SUSE-SU-2016:0400
  • Broken Link
  • Third Party Advisory
1034970
  • Broken Link
  • Third Party Advisory
  • VDB Entry
openSUSE-SU-2016:0412
  • Broken Link
  • Third Party Advisory
SUSE-SU-2016:0398
  • Broken Link
  • Third Party Advisory
openSUSE-SU-2016:0415
  • Broken Link
  • Third Party Advisory
39462
  • Exploit
  • Third Party Advisory
  • VDB Entry
    1. Конфигурация 1

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

      Конфигурация 2

      cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

      Конфигурация 3

      cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*

      Running on/with:
      cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

      Конфигурация 4

      Running on/with:
      cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*

      Конфигурация 5

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*

      Running on/with:
      cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

      Конфигурация 6

      Running on/with:
      cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

      cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*

      Конфигурация 7

      cpe:2.3:a:adobe:air_desktop_runtime:*:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

      Конфигурация 8

      cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

      Конфигурация 9

      cpe:2.3:a:adobe:air_sdk_\&_compiler:*:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*