CVE-2016-1001

🗓️ 12 Mar 2016 15:00:00Reported by adobeType

cve🔗 web.nvd.nist.gov👁 75 Views🌐 WEB

Adobe Flash Player before 18.0.0.333 heap-based buffer overflow CVE-2016-100

Reporter	Title	Published	Views	Family All 77
0day.today	Adobe Flash - Zlib Codec Heap Overflow	23 Mar 201600:00	–	zdt
ALT Linux	Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt60	11 Mar 201600:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt60	11 Mar 201600:00	–	altlinux
Tenable Nessus	Flash Player < 21.0.0.182 Multiple Vulnerabilities (APSB16-08)	30 Mar 201600:00	–	nessus
Tenable Nessus	Adobe AIR < 21.0.0.176 Multiple Vulnerabilities (APSB16-08)	30 Mar 201600:00	–	nessus
Tenable Nessus	Adobe AIR <= 20.0.0.260 Multiple Vulnerabilities (APSB16-08)	11 Mar 201600:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 20.0.0.306 Multiple Vulnerabilities (APSB16-08)	11 Mar 201600:00	–	nessus
Tenable Nessus	FreeBSD : flash -- multiple vulnerabilities (f7b3d1eb-f738-11e5-a710-0011d823eebd)	1 Apr 201600:00	–	nessus
Tenable Nessus	GLSA-201603-07 : Adobe Flash Player: Multiple vulnerabilities	14 Mar 201600:00	–	nessus
Tenable Nessus	Adobe AIR for Mac <= 20.0.0.260 Multiple Vulnerabilities (APSB16-08)	11 Mar 201600:00	–	nessus

NVD

Node

adobe flash_playerRange≤20.0.0.306chrome

AND

apple mac_os_xMatch-

google chrome_osMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

Node

adobe airRange≤20.0.0.233

AND

google androidMatch-

Node

adobe air_sdkRange≤20.0.0.260

samsung x14j_firmwareMatcht-ms14jakucb-1102.5

AND

apple iphone_osMatch-

apple mac_os_xMatch-

google androidMatch-

microsoft windowsMatch-

Node

adobe flash_playerRange≤11.2.202.569

AND

linux linux_kernelMatch-

Node

adobe flash_player_desktop_runtimeRange≤20.2.2.306

AND

apple mac_os_xMatch-

microsoft windowsMatch-

Node

adobe flash_playerRange≤20.0.0.306edge

AND

microsoft windows_10Match-

Node

adobe flash_playerRange≤20.0.0.306internet_explorer

AND

microsoft windows_10Match-

microsoft windows_8.1Match-

Node

adobe air_desktop_runtimeRange≤20.0.0.260

AND

apple mac_os_xMatch-

microsoft windowsMatch-

Node

adobe air_sdk_&_compilerRange≤20.0.0.260

AND

apple iphone_osMatch-

apple mac_os_xMatch-

google androidMatch-

microsoft windowsMatch-

Source	Link
securitytracker	www.securitytracker.com/id/1035251
lists	www.lists.opensuse.org/opensuse-security-announce/2016-03/msg00022.html
lists	www.lists.opensuse.org/opensuse-security-announce/2016-03/msg00032.html
exploit-db	www.exploit-db.com/exploits/39609/
helpx	www.helpx.adobe.com/security/products/flash-player/apsb16-08.html
lists	www.lists.opensuse.org/opensuse-security-announce/2016-03/msg00024.html
security	www.security.gentoo.org/glsa/201603-07
lists	www.lists.opensuse.org/opensuse-security-announce/2016-03/msg00023.html

Parameter	Position	Path	Description	CWE
file	path	127.0.0.1/LoadMP42.swf?file=smalloverflow.flv	Heap-based buffer overflow in Flash Player via loading a crafted FLV, exploitable payload for arbitrary code execution on Windows	CWE-787

06 May 2026 22:30Current

9High risk

Vulners AI Score9

CVSS 26.8

CVSS 3.18.8

EPSS0.42855

CWE-787