CVE-2016-4173: Use After Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4173?
CVE-2016-4173 has a critical severity rating as it allows attackers to execute arbitrary code.
How do I fix CVE-2016-4173?
To fix CVE-2016-4173, update Adobe Flash Player to version 22.0.0.209 or later.
Which versions of Adobe Flash Player are affected by CVE-2016-4173?
CVE-2016-4173 affects Adobe Flash Player versions before 18.0.0.366 and 19.x through 22.x before 22.0.0.209.
Can CVE-2016-4173 be exploited remotely?
Yes, CVE-2016-4173 can be exploited remotely without user interaction.
Is CVE-2016-4173 present on Linux systems?
Yes, CVE-2016-4173 is present on Linux systems using Adobe Flash Player versions before 11.2.202.632.