CVE-2016-6936: Infoleak
Adobe AIR SDK & Compiler before 23.0.0.257 on Windows does not support Android runtime-analytics transport security, which might allow remote attackers to obtain sensitive information by leveraging access to a network over which analytics data is sent.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6936?
CVE-2016-6936 is considered a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2016-6936?
To fix CVE-2016-6936, upgrade to Adobe AIR SDK & Compiler version 23.0.0.257 or later.
Who is affected by CVE-2016-6936?
CVE-2016-6936 affects users of Adobe AIR SDK & Compiler version 22.0.0.153 on Windows.
What type of vulnerability is CVE-2016-6936?
CVE-2016-6936 is an information disclosure vulnerability related to inadequate transport security for analytics data.
Can CVE-2016-6936 be exploited remotely?
Yes, CVE-2016-6936 can potentially be exploited remotely by attackers with access to the network over which analytics data is transmitted.