CVE-2016-7859: Use After Free
Published Nov 8, 2016
·Updated
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected Software
23 affected components
Adobe Flash Player for Linux<=11.2.202.643
Linux Linux kernel
Adobe Flash Player Chrome<=23.0.0.205
Apple iOS and macOS
Google Chrome OS
Microsoft Windows
Adobe Flash Player Edge<=23.0.0.205
Adobe Flash Player Internet Explorer<=23.0.0.205
Microsoft Windows 10
Microsoft Windows 10=1511
Microsoft Windows 10=1607
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Adobe Flash Player<=23.0.0.205
redhat Enterprise Linux Desktop=5.0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Server=5.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=5.0
redhat Enterprise Linux Workstation=6.0
Remediation
Event History
Nov 8, 2016
CVE Published
via MITRE·05:45 PM
Data Sourced
via MITRE·05:45 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-7859?
CVE-2016-7859 has a critical severity rating as it allows for arbitrary code execution.
2
How do I fix CVE-2016-7859?
To fix CVE-2016-7859, update Adobe Flash Player to version 23.0.0.206 or later.
3
Which versions are affected by CVE-2016-7859?
Adobe Flash Player versions 23.0.0.205 and earlier, as well as 11.2.202.643 and earlier, are affected by CVE-2016-7859.
4
What platforms are impacted by CVE-2016-7859?
CVE-2016-7859 affects Adobe Flash Player on various platforms including Windows, macOS, and Linux.
5
What kind of attack can exploit CVE-2016-7859?
Exploitation of CVE-2016-7859 can lead to remote code execution, allowing attackers to execute arbitrary code on the affected system.