CVE-2016-0983
HighSummary
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.329 and in versions 19.x and 20.x before 20.0.0.306 on Windows and OS X, as well as before 11.2.202.569 on Linux. It also affects Adobe AIR before version 20.0.0.260 and Adobe AIR SDK and Compiler before version 20.0.0.260, allowing attackers to execute arbitrary code.
Risk Assessment
Exploitation of this vulnerability may lead to remote code execution, posing a serious security threat to organizational systems. Attackers could gain control over the system, potentially resulting in data loss or system compromise.
Recommendation
It is recommended to update Adobe Flash Player and Adobe AIR to the latest versions to mitigate the risks associated with this vulnerability. Additionally, systems should be monitored for unauthorized activities.
Other vulnerabilities in Adobe Flash Player, Adobe AIR, Adobe AIR SDK, Adobe AIR Compiler
See all- CVE-2016-0982High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.329 and in versions 19.x and 20.x before 20.0.0.306 on Windows and OS X, as well as before 11.2.202.569 on Linux. Also affects Adobe AIR before version 20.0.0.260 and Adobe AIR SDK and Compiler before version 20.0.0.260.
- CVE-2015-8650High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. It also affects Adobe AIR before 20.0.0.233 and Adobe AIR SDK and Compiler before 20.0.0.233, allowing attackers to execute arbitrary code.
- CVE-2015-8635High
Use-after-free vulnerability in Adobe Flash Player before version 18.0.0.324 and in versions 19.x and 20.x before 20.0.0.267 on Windows and OS X, as well as before 11.2.202.559 on Linux. It also affects Adobe AIR before 20.0.0.233 and Adobe AIR SDK and Compiler before 20.0.0.233, allowing attackers to execute arbitrary code.
- CVE-2015-4430High
Use-after-free vulnerability in Adobe Flash Player before version 13.0.0.302 and in versions 14.x through 18.x before 18.0.0.203 on Windows and OS X, as well as before 11.2.202.481 on Linux. It also affects Adobe AIR before version 18.0.0.180 and Adobe AIR SDK and Compiler before the same version, allowing attackers to execute arbitrary code.
Original NVD description (English source)
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0984.