Published: 12/03/2016 Updated: 14/12/2022

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 940

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in Adobe Flash Player prior to 18.0.0.333 and 19.x up to and including 21.x prior to 21.0.0.182 on Windows and OS X and prior to 11.2.202.577 on Linux, Adobe AIR prior to 21.0.0.176, Adobe AIR SDK prior to 21.0.0.176, and Adobe AIR SDK & Compiler prior to 21.0.0.176 allows malicious users to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0999, and CVE-2016-1000.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe flash_player
adobe air
adobe air_sdk
samsung x14j_firmware t-ms14jakucb-1102.5
adobe flash_player_desktop_runtime
adobe air_desktop_runtime
adobe air_sdk_\\&_compiler

Use-after-free vulnerability in Adobe Flash Player before 1800333 and 19x through 21x before 2100182 on Windows and OS X and before 112202577 on Linux, Adobe AIR before 2100176, Adobe AIR SDK before 2100176, and Adobe AIR SDK & Compiler before 2100176 allows attackers to execute arbitrary code via unspecified vectors, a diff ...

Source: bugschromiumorg/p/project-zero/issues/detail?id=716 The ActionScript parameter conversion in the fix for an issue in the December Flash bulletin (helpxadobecom/security/products/flash-player/apsb15-32html, most likely one of the UaFs reported by Yuki Chen) can sometimes access a parameter on the native stack that is un ...

Sources: bugschromiumorg/p/project-zero/issues/detail?id=716 googleprojectzeroblogspotca/2016/03/life-after-isolated-heaphtml The bug is an uninitialized variable in the fix to an ActionScript 2 use-after-free bug Roughly 80 of these types of issues have been fixed by Adobe in the past year, and two uninitialized variable is ...

CWE-416 https://helpx.adobe.com/security/products/flash-player/apsb16-08.html http://www.securityfocus.com/bid/84312 http://www.securitytracker.com/id/1035251 http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00023.html https://security.gentoo.org/glsa/201603-07 http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00024.html http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00022.html http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00032.html https://www.exploit-db.com/exploits/39631/https://www.exploit-db.com/exploits/39612/https://nvd.nist.gov https://www.exploit-db.com/exploits/39612/https://access.redhat.com/security/cve/cve-2016-0998

CVE-2016-0998

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect