Published: 10/02/2016 Updated: 26/01/2023

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in Adobe Flash Player prior to 18.0.0.329 and 19.x and 20.x prior to 20.0.0.306 on Windows and OS X and prior to 11.2.202.569 on Linux, Adobe AIR prior to 20.0.0.260, Adobe AIR SDK prior to 20.0.0.260, and Adobe AIR SDK & Compiler prior to 20.0.0.260 allows malicious users to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe flash_player
adobe flash_player_desktop_runtime
adobe air_desktop_runtime
adobe air_sdk
adobe air_sdk_\\&_compiler

Use-after-free vulnerability in Adobe Flash Player before 1800329 and 19x and 20x before 2000306 on Windows and OS X and before 112202569 on Linux, Adobe AIR before 2000260, Adobe AIR SDK before 2000260, and Adobe AIR SDK & Compiler before 2000260 allows attackers to execute arbitrary code via unspecified vectors, a differen ...

Source: codegooglecom/p/google-security-research/issues/detail?id=667 There is a use-after-free in LoadVarsdecode If a watch is set on the object that the parameters are being decoded into, and the watch deletes the object, then other methods are called on the deleted object after it is freed A PoC is as follows: var lv = new LoadVar ...

CWE-416 https://helpx.adobe.com/security/products/flash-player/apsb16-04.html https://security.gentoo.org/glsa/201603-07 http://rhn.redhat.com/errata/RHSA-2016-0166.html http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html http://www.securitytracker.com/id/1034970 http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html https://www.exploit-db.com/exploits/39463/https://nvd.nist.gov https://www.exploit-db.com/exploits/39463/https://access.redhat.com/security/cve/cve-2016-0974

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2016-0974

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect