Main Vulnerability Database Vulnerabilities #VU5763

#VU5763 Memory corruption in Adobe products - CVE-2016-1029

Published: February 13, 2017

Vulnerability identifier: #VU5763

Vulnerability risk: High

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2016-1029

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
Adobe Flash Player
Adobe Flash Player Extended Support Release
Adobe Flash Player for Linux
Adobe AIR

Software vendor:
Adobe

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The weakness exists due to boundary error. A remote attacker can create a specially crafted Web site, trick the victim into visiting it, trigger memory corruption and execute arbitrary code with privileges of the current user.

Successful exploitation of the vulnerability results in arbitrary code execution.

Remediation

Install update from vendor's website.

External links

https://helpx.adobe.com/security/products/flash-player/apsb16-10.html