CVE-2016-7857: Use After Free
Published Nov 8, 2016
·Updated
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected Software
23 affected components
Adobe Flash Player for Linux<=11.2.202.643
Linux Linux kernel
Adobe Flash Player<=23.0.0.205
Apple iOS and macOS
Microsoft Windows
Adobe Flash Player Chrome<=23.0.0.205
Google Chrome OS
Adobe Flash Player Edge<=23.0.0.205
Adobe Flash Player Internet Explorer<=23.0.0.205
Microsoft Windows 10
Microsoft Windows 10=1511
Microsoft Windows 10=1607
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
redhat Enterprise Linux Desktop=5.0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Server=5.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=5.0
redhat Enterprise Linux Workstation=6.0
Remediation
Event History
Nov 8, 2016
CVE Published
via MITRE·05:45 PM
Data Sourced
via MITRE·05:45 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-7857?
CVE-2016-7857 has a critical severity rating due to the potential for arbitrary code execution.
2
How do I fix CVE-2016-7857?
To fix CVE-2016-7857, update Adobe Flash Player to version 23.0.0.206 or later.
3
Which versions of Adobe Flash Player are affected by CVE-2016-7857?
Adobe Flash Player versions 23.0.0.205 and earlier, as well as 11.2.202.643 and earlier, are affected by CVE-2016-7857.
4
What types of systems are impacted by CVE-2016-7857?
CVE-2016-7857 impacts systems running vulnerable versions of Adobe Flash Player on various platforms including Windows, macOS, and Linux.
5
Can CVE-2016-7857 be exploited remotely?
Yes, CVE-2016-7857 can potentially be exploited remotely by an attacker.