Home > Vulnerability Database > CVE-2016-7892

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2016-7892

Date: December 15, 2016

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.

Language: Unix

Severity Score

8.8

Related Resources (11)

Url: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-154

Url: http://www.securitytracker.com/id/1037442

Url: http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00064.html

Url: https://access.redhat.com/security/cve/CVE-2016-7892

Url: http://www.securityfocus.com/bid/94877

Url: http://lists.opensuse.org/opensuse-updates/2016-12/msg00112.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2016-7892

Url: http://rhn.redhat.com/errata/RHSA-2016-2947.html

Url: https://helpx.adobe.com/security/products/flash-player/apsb16-39.html

Url: https://security.gentoo.org/glsa/201701-17

Url: https://www.mend.io/vulnerability-database/CVE-2016-7892

Severity Score

8.8

Weakness Type (CWE)

Use After Free

CWE-416

CVSS v3.1

Base Score:	8.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	9.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Do you need more information?

Contact Us