Description (CNA)
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Worker class. Successful exploitation could lead to arbitrary code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier | affected Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier |
CWE
No CWE identifiers supplied.
References
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154
- https://security.gentoo.org/glsa/201701-17
- http://www.securitytracker.com/id/1037442
- http://www.securityfocus.com/bid/94866
- http://rhn.redhat.com/errata/RHSA-2016-2947.html
- https://helpx.adobe.com/security/products/flash-player/apsb16-39.html
- http://www.zerodayinitiative.com/advisories/ZDI-16-627
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
ADP enrichment
No English description supplied.
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154
- https://security.gentoo.org/glsa/201701-17
- http://www.securitytracker.com/id/1037442
- http://www.securityfocus.com/bid/94866
- http://rhn.redhat.com/errata/RHSA-2016-2947.html
- https://helpx.adobe.com/security/products/flash-player/apsb16-39.html
- http://www.zerodayinitiative.com/advisories/ZDI-16-627
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html