Microsoft security advisoryADV160010
December 2016 Adobe Flash Security Update
View on Microsoft →
Related records (15)
Priority MEDIUM 51
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class for specific search strategies.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.10965 · Published 2016-12-15 · Partial fix CWE-787
Priority MEDIUM 51
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to backtrack search functionality.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.11343 · Published 2016-12-15 · Partial fix CWE-787
Priority MEDIUM 51
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to alternation functionality.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.11293 · Published 2016-12-15 · Partial fix CWE-787
Priority MEDIUM 51
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to bookmarking in searches.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.10965 · Published 2016-12-15 · Partial fix CWE-787
Priority MEDIUM 49
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the NetConnection class when handling an attached script object.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0787 · Published 2016-12-15 · Partial fix CWE-416
Priority MEDIUM 49
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the PSDK's MediaPlayer class.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.08145 · Published 2016-12-15 · Partial fix CWE-416
Priority MEDIUM 49
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulnerability in the BitmapData class.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0848 · Published 2016-12-15 · Partial fix CWE-190
Priority MEDIUM 49
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class related to objects at multiple presentation levels.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0787 · Published 2016-12-15 · Partial fix CWE-416
Priority MEDIUM 48
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Worker class.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0678 · Published 2016-12-15 · Partial fix CWE-787
Priority MEDIUM 47
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class when handling conversion to an object.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.06003 · Published 2016-12-15 · Partial fix CWE-416
Priority MEDIUM 47
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability when setting the length property of an array object.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0603 · Published 2016-12-15 · Partial fix CWE-416
Priority MEDIUM 47
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the Action Message Format serialization (AFM0).
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0603 · Published 2016-12-15 · Partial fix CWE-416
Priority MEDIUM 46
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Clipboard class related to data handling functionality.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0502 · Published 2016-12-15 · Partial fix CWE-787
Priority MEDIUM 46
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the NetConnection class when handling the proxy types.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0502 · Published 2016-12-15 · Partial fix CWE-787
Priority MEDIUM 46
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the PSDK class related to ad policy functionality method.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0502 · Published 2016-12-15 · Partial fix CWE-787