CVE-2016-7875: fallo en Adobe Flash Player 23.0.0.207 and earlier, 11.2.
Publicada el · Actualizada el
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 8.3%
probabilidad de explotación
8.3%top 5% de las CVE
explotación observada
noninguna fuente lo reporta
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution.
Productos afectados
n/a · Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlierReferencias
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.htmlhttp://lists.opensuse.org/opensuse-updates/2016-12/msg00112.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2947.htmlhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154https://helpx.adobe.com/security/products/flash-player/apsb16-39.htmlhttps://security.gentoo.org/glsa/201701-17http://www.securityfocus.com/bid/94866http://www.securitytracker.com/id/1037442http://www.zerodayinitiative.com/advisories/ZDI-16-621