Veille CVE
CVE-2016-7892
8.8 Élevée Exploitée activementCatalogue CISA KEV — Adobe Flash Player Use-After-Free Vulnerability
Ajoutée le 25/03/2022 · Échéance de correction (agences US) : 15/04/2022
Action requise : The impacted product is end-of-life and should be disconnected if still in use.
Description
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 3.1 | 8.8 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 2.0 | 9.3 Élevée | nvd@nist.gov (NVD) | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Faiblesses (CWE)
Références
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html Broken Link
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html Broken Link
- http://rhn.redhat.com/errata/RHSA-2016-2947.html Third Party Advisory
- http://www.securityfocus.com/bid/94877 Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037442 Broken LinkThird Party AdvisoryVDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 PatchThird Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb16-39.html PatchVendor Advisory
- https://security.gentoo.org/glsa/201701-17 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html Broken Link
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html Broken Link
- http://rhn.redhat.com/errata/RHSA-2016-2947.html Third Party Advisory
- http://www.securityfocus.com/bid/94877 Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037442 Broken LinkThird Party AdvisoryVDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154 PatchThird Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb16-39.html PatchVendor Advisory
- https://security.gentoo.org/glsa/201701-17 Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7892 US Government Resource