First published: Wed Sep 14 2016(Updated: )
Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Macromedia Flash Player | <=11.2.202.632 | |
Linux Kernel | ||
Windows 10 | ||
Microsoft Windows | ||
Macromedia Flash Player | <=22.0.0.211 | |
Macromedia Flash Player | <=22.0.0.211 | |
Apple iOS and macOS | ||
Microsoft Windows Operating System | ||
Adobe Flash Player | <=22.0.0.211 | |
Macromedia Flash Player | <=18.0.0.366 | |
Macromedia Flash Player | <=22.0.0.211 | |
Chrome OS |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-4284 has a high severity level allowing for potential arbitrary code execution and denial of service.
To fix CVE-2016-4284, update Adobe Flash Player to version 18.0.0.375 or later for Windows and OS X, and version 11.2.202.635 or later for Linux.
Adobe Flash Player versions prior to 18.0.0.375, 19.x through 23.x before 23.0.0.162 are affected by CVE-2016-4284.
Yes, CVE-2016-4284 can allow attackers to execute arbitrary code remotely under certain conditions.
Adobe Flash Player reached end of life on December 31, 2020, and is no longer supported.