Main Vulnerability Database Vulnerabilities #VU5730

#VU5730 Memory corruption in Adobe products - CVE-2016-0992

Published: February 13, 2017

Vulnerability identifier: #VU5730

Vulnerability risk: High

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2016-0992

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
Adobe AIR
Adobe Flash Player
Adobe Flash Player Extended Support Release
Adobe Flash Player for Linux

Software vendor:
Adobe

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The weakness exists due to boundary error. A remote attacker can create a specially crafted Web site, trick the victim into visiting it, trigger memory corruption and execute arbitrary code with privileges of the current user.

Successful exploitation of the vulnerability results in arbitrary code execution.

Remediation

Install update from vendor's website.

External links

https://helpx.adobe.com/security/products/flash-player/apsb16-08.html