CVE-2016-7859

EPSS 7.04%
Veröffentlicht 08.11.2016 17:59:03
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 10

NVD 11 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Adobe ≫ Flash Player For Linux Version <= 11.2.202.643

Linux ≫ Linux Kernel Version -

Adobe ≫ Flash Player SwPlatform chrome Version <= 23.0.0.205

   Apple ≫ macOS X Version -
   Google ≫ Chrome Os Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -

Adobe ≫ Flash Player SwPlatform edge Version <= 23.0.0.205

   Microsoft ≫ Windows 10 Version -
   Microsoft ≫ Windows 10 Version 1511
   Microsoft ≫ Windows 10 Version 1607
   Microsoft ≫ Windows 8.1 Version -
   Microsoft ≫ Windows Rt 8.1 Version -
   Microsoft ≫ Windows Server 2012 Version -
   Microsoft ≫ Windows Server 2012 Version r2
   Microsoft ≫ Windows Server 2016 Version - HwPlatform x64

Adobe ≫ Flash Player SwPlatform internet_explorer Version <= 23.0.0.205

Adobe ≫ Flash Player Version <= 23.0.0.205

Apple ≫ macOS X Version -
Microsoft ≫ Windows Version -

Redhat ≫ Enterprise Linux Desktop Version 5.0

Redhat ≫ Enterprise Linux Desktop Version 6.0

Redhat ≫ Enterprise Linux Server Version 5.0

Redhat ≫ Enterprise Linux Server Version 6.0

Redhat ≫ Enterprise Linux Workstation Version 5.0

Redhat ≫ Enterprise Linux Workstation Version 6.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	7.04%	0.934

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.8	2.8	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

http://rhn.redhat.com/errata/RHSA-2016-2676.html

Third Party Advisory

http://www.securityfocus.com/bid/94153

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1037240

Third Party Advisory

VDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-141

Patch

Vendor Advisory

https://helpx.adobe.com/security/products/flash-player/apsb16-37.html

Patch

Vendor Advisory

https://security.gentoo.org/glsa/201611-18

Third Party Advisory

http://www.zerodayinitiative.com/advisories/ZDI-16-602

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-7859

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-7859

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-7859

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2016-7859