Remote Yes

Type Arbitrary code execution

Description

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurrency error when manipulating a display list. Successful exploitation could lead to arbitrary code execution.

AVG-136 lib32-flashplugin 24.0.0.186-1 24.0.0.194-1 Critical Fixed

AVG-135 flashplugin 24.0.0.186-1 24.0.0.194-1 Critical Fixed

12 Jan 2017 ASA-201701-17 AVG-136 lib32-flashplugin Critical multiple issues

12 Jan 2017 ASA-201701-16 AVG-135 flashplugin Critical multiple issues

https://helpx.adobe.com/security/products/flash-player/apsb17-02.html