Published: 09/04/2016 Updated: 26/01/2023

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in Adobe Flash Player prior to 18.0.0.343 and 19.x up to and including 21.x prior to 21.0.0.213 on Windows and OS X and prior to 11.2.202.616 on Linux allows malicious users to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1013, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe flash_player
adobe flash_player_desktop_runtime
adobe air_desktop_runtime
adobe air_sdk
adobe air_sdk_\\&_compiler

Use-after-free vulnerability in Adobe Flash Player before 1800343 and 19x through 21x before 2100213 on Windows and OS X and before 112202616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1013, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031 ...

Source: bugschromiumorg/p/project-zero/issues/detail?id=759 There is a use-after-free in MovieClipduplicateMovieClipIf an action associated with the MovieClip frees the clip provided as the initObject parameter to the call, it will be used after it is freedA PoC is attached Proof of Concept: githubcom/offensive-security/ex ...

CWE-416 https://helpx.adobe.com/security/products/flash-player/apsb16-10.html http://packetstormsecurity.com/files/137050/Adobe-Flash-MovieClip.duplicateMovieClip-Use-After-Free.html http://rhn.redhat.com/errata/RHSA-2016-0610.html http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html http://www.securitytracker.com/id/1035509 http://www.securityfocus.com/bid/85926 https://www.exploit-db.com/exploits/39779/https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050 https://nvd.nist.gov https://www.exploit-db.com/exploits/39779/https://access.redhat.com/security/cve/cve-2016-1011

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2016-1011

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect