CVE-2016-7865: Incorrect Type Cast
Published Nov 8, 2016
·Updated
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected Software
23 affected components
Adobe Flash Player<=23.0.0.205
Apple iOS and macOS
Microsoft Windows
Adobe Flash Player Edge<=23.0.0.205
Adobe Flash Player Internet Explorer<=23.0.0.205
Microsoft Windows 10
Microsoft Windows 10=1511
Microsoft Windows 10=1607
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Adobe Flash Player Chrome<=23.0.0.205
Google Chrome OS
Linux Linux kernel
Adobe Flash Player for Linux<=11.2.202.643
redhat Enterprise Linux Desktop=5.0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Server=5.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=5.0
redhat Enterprise Linux Workstation=6.0
Remediation
Event History
Nov 8, 2016
CVE Published
via MITRE·05:45 PM
Data Sourced
via MITRE·05:45 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-7865?
CVE-2016-7865 has a critical severity level, as it can lead to arbitrary code execution.
2
How do I fix CVE-2016-7865?
To fix CVE-2016-7865, update Adobe Flash Player to version 23.0.0.205 or later.
3
What versions of Adobe Flash Player are affected by CVE-2016-7865?
Adobe Flash Player versions 23.0.0.205 and earlier as well as 11.2.202.643 and earlier are affected by CVE-2016-7865.
4
Can CVE-2016-7865 affect versions of Adobe Flash Player on Linux?
Yes, CVE-2016-7865 affects Adobe Flash Player on Linux if the version is 11.2.202.643 or earlier.
5
What might an attacker gain by exploiting CVE-2016-7865?
An attacker exploiting CVE-2016-7865 could gain the ability to execute arbitrary code on the affected system.