Adobe Flash Accessibility sendEvent Use-After-Free Remote Code Execution Vulnerability

🗓️ 12 Oct 2016 00:00:00Reported by Akitsu MadokaType

zdi🔗 www.zerodayinitiative.com👁 24 Views

Adobe Flash Accessibility sendEvent Use-After-Free Remote Code Execution Vulnerability. Allows remote code execution via Accessibility's sendEvent method

Reporter	Title	Published	Views	Family All 65
ALT Linux	Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt66	12 Oct 201600:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt66	12 Oct 201600:00	–	altlinux
FreeBSD	flash -- multiple vulnerabilities	11 Oct 201600:00	–	freebsd
Tenable Nessus	Flash Player < 11.2.202.637 / 18.0.0.382 / 23.0.0.185 Multiple Vulnerabilities (APSB16-32)	14 Oct 201600:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 23.0.0.162 Multiple Vulnerabilities (APSB16-32)	11 Oct 201600:00	–	nessus
Tenable Nessus	FreeBSD : flash -- multiple vulnerabilities (2482c798-93c6-11e6-846f-bc5ff4fb5ea1)	25 Oct 201600:00	–	nessus
Tenable Nessus	GLSA-201610-10 : Adobe Flash Player: Multiple vulnerabilities	31 Oct 201600:00	–	nessus
Tenable Nessus	Adobe Flash Player for Mac <= 23.0.0.162 Multiple Vulnerabilities (APSB16-32)	11 Oct 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : flash-player (openSUSE-2016-1179)	13 Oct 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : flash-player (openSUSE-2016-1183)	13 Oct 201600:00	–	nessus

Source	Link
helpx	www.helpx.adobe.com/security/products/flash-player/apsb16-32.html

12 Oct 2016 00:00Current

3.1Low risk

Vulners AI Score3.1

CVSS 26.8

EPSS0.05076