CVE-2016-0960: Buffer Overflow
Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, CVE-2016-1002, and CVE-2016-1005.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0960?
CVE-2016-0960 has a critical severity rating due to its potential to allow attackers to execute arbitrary code.
How do I fix CVE-2016-0960?
To fix CVE-2016-0960, update Adobe Flash Player to version 18.0.0.333 or higher, or 21.0.0.182 for 19.x to 21.x.
Which Adobe products are affected by CVE-2016-0960?
CVE-2016-0960 affects Adobe Flash Player versions before 18.0.0.333 and 19.x through 21.x before 21.0.0.182, as well as Adobe AIR and Adobe AIR SDK versions before 21.0.0.176.
On which operating systems does CVE-2016-0960 exist?
CVE-2016-0960 exists on Windows, OS X, and Linux operating systems.
What kind of attack can CVE-2016-0960 enable?
CVE-2016-0960 can enable remote code execution and potentially lead to denial of service attacks.