CVE-2016-0984Adobe Flash Player and AIR Use-After-Free Vulnerability
Aktif olarak istismar ediliyor — Adobe Flash Player and AIR Use-After-Free Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını 25.05.2022 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 15.06.2022.
Gerekli işlem: The impacted products are end-of-life and should be disconnected if still in use. https://nvd.nist.gov/vuln/detail/CVE-2016-0984
Açıklama
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| adobe | air desktop runtime | ≤ 20.0.0.233 | |
| adobe | air sdk | ≤ 20.0.0.233 | |
| adobe | air sdk & compiler | ≤ 20.0.0.233 | |
| adobe | flash player | ≤ 20.0.0.272 | |
| adobe | flash player desktop runtime | ≤ 20.0.0.286 |
Kaynaklar ve yamalar
- 39462 exploitExploitThird Party AdvisoryVDB Entry
- SUSE-SU-2016:0400 vendor-advisoryBroken LinkThird Party Advisory
- 1034970 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- GLSA-201603-07 vendor-advisoryThird Party Advisory
- RHSA-2016:0166 vendor-advisoryThird Party Advisory
- openSUSE-SU-2016:0415 vendor-advisoryBroken LinkThird Party Advisory
- openSUSE-SU-2016:0412 vendor-advisoryBroken LinkThird Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb16-04.html PatchVendor Advisory
- SUSE-SU-2016:0398 vendor-advisoryBroken LinkThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0984 US Government Resource
CPE eşleşmeleri (NVD) (9)
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*≤ 20.0.0.272cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*≤ 20.0.0.272cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*≤ 11.2.202.559cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*≤ 20.0.0.286cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*≤ 18.0.0.326cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*≤ 20.0.0.286cpe:2.3:a:adobe:air_desktop_runtime:*:*:*:*:*:*:*:*≤ 20.0.0.233cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*≤ 20.0.0.233cpe:2.3:a:adobe:air_sdk_\&_compiler:*:*:*:*:*:*:*:*≤ 20.0.0.233