CVE-2016-7861: Incorrect Type Cast
Published Nov 8, 2016
·Updated
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected Software
23 affected components
Adobe Flash Player Edge<=23.0.0.205
Adobe Flash Player Internet Explorer<=23.0.0.205
Microsoft Windows 10
Microsoft Windows 10=1511
Microsoft Windows 10=1607
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Adobe Flash Player for Linux<=11.2.202.643
Linux Linux kernel
Adobe Flash Player Chrome<=23.0.0.205
Apple iOS and macOS
Google Chrome OS
Microsoft Windows
Adobe Flash Player<=23.0.0.205
redhat Enterprise Linux Desktop=5.0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Server=5.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=5.0
redhat Enterprise Linux Workstation=6.0
Remediation
Event History
Nov 8, 2016
CVE Published
via MITRE·05:45 PM
Data Sourced
via MITRE·05:45 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-7861?
CVE-2016-7861 is classified as a critical severity vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2016-7861?
To fix CVE-2016-7861, update Adobe Flash Player to version 23.0.0.206 or later.
3
What versions of Adobe Flash Player are affected by CVE-2016-7861?
CVE-2016-7861 affects Adobe Flash Player versions 23.0.0.205 and earlier for all platforms.
4
What could be the impact of exploiting CVE-2016-7861?
Exploitation of CVE-2016-7861 could lead to arbitrary code execution on affected systems.
5
Is there a workaround for CVE-2016-7861 if an update cannot be applied?
If unable to apply an update for CVE-2016-7861, consider disabling Adobe Flash Player to mitigate risk.