Description (CNA)
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier | affected Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier |
CWE
No CWE identifiers supplied.
References
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154
- https://security.gentoo.org/glsa/201701-17
- http://www.zerodayinitiative.com/advisories/ZDI-16-621
- http://www.securitytracker.com/id/1037442
- http://www.securityfocus.com/bid/94866
- http://rhn.redhat.com/errata/RHSA-2016-2947.html
- https://helpx.adobe.com/security/products/flash-player/apsb16-39.html
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html
ADP enrichment
No English description supplied.
- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154
- https://security.gentoo.org/glsa/201701-17
- http://www.zerodayinitiative.com/advisories/ZDI-16-621
- http://www.securitytracker.com/id/1037442
- http://www.securityfocus.com/bid/94866
- http://rhn.redhat.com/errata/RHSA-2016-2947.html
- https://helpx.adobe.com/security/products/flash-player/apsb16-39.html
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html