CVE-2016-1032 Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of servic...
HighCVSS 8.8
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, and CVE-2016-1033.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | <= 11.2.202.577 | No fix listed |
| Adobe flash player | <= 18.0.0.333 | No fix listed |
| Adobe flash player | <= 21.0.0.197 | No fix listed |
| Adobe flash player desktop runtime | <= 21.0.0.197 | No fix listed |
| Adobe air desktop runtime | <= 21.0.0.176 | No fix listed |
| Adobe air sdk | <= 21.0.0.176 | No fix listed |
| Adobe air sdk compiler | <= 21.0.0.176 | No fix listed |
References
- SUSE-SU-2016:1305 broken-link third-party-advisory vendor-advisory
- openSUSE-SU-2016:1306 broken-link third-party-advisory vendor-advisory
- RHSA-2016:0610 third-party-advisory vendor-advisory
- 85932 broken-link third-party-advisory vdb-entry
- 1035509 broken-link third-party-advisory vdb-entry
- helpx.adobe.com patch vendor-advisory