Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.

An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

This update upgrades Flash Player to version 11.2.202.632.

Security Fix(es) :

* This update fixes multiple vulnerabilities in Adobe Flash Player.
These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content.
(CVE-2016-4172, CVE-2016-4173, CVE-2016-4174, CVE-2016-4175, CVE-2016-4176, CVE-2016-4177, CVE-2016-4178, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4222, CVE-2016-4223, CVE-2016-4224, CVE-2016-4225, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, CVE-2016-4232, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, CVE-2016-4246, CVE-2016-4247, CVE-2016-4248, CVE-2016-4249)

The remote Windows host is missing KB3174060. It is, therefore, affected by multiple vulnerabilities :

  - Multiple memory corruption issues exist that allow a     remote attacker to execute arbitrary code.
    (CVE-2016-4172, CVE-2016-4175, CVE-2016-4179,     CVE-2016-4180, CVE-2016-4181, CVE-2016-4182,     CVE-2016-4183, CVE-2016-4184, CVE-2016-4185,     CVE-2016-4186, CVE-2016-4187, CVE-2016-4188,     CVE-2016-4189, CVE-2016-4190, CVE-2016-4217,     CVE-2016-4218, CVE-2016-4219, CVE-2016-4220,     CVE-2016-4221, CVE-2016-4233, CVE-2016-4234,     CVE-2016-4235, CVE-2016-4236, CVE-2016-4237,     CVE-2016-4238, CVE-2016-4239, CVE-2016-4240,     CVE-2016-4241, CVE-2016-4242, CVE-2016-4243,     CVE-2016-4244, CVE-2016-4245, CVE-2016-4246)

  - Multiple use-after-free errors exist that allow a remote     attacker to execute arbitrary code. (CVE-2016-4173,     CVE-2016-4174, CVE-2016-4222, CVE-2016-4226,     CVE-2016-4227, CVE-2016-4228, CVE-2016-4229,     CVE-2016-4230, CVE-2016-4231, CVE-2016-4248,     CVE-2016-7020)

  - Multiple stack corruption issues exist that allow a     remote attacker to execute arbitrary code.
    (CVE-2016-4176, CVE-2016-4177)

  - A security bypass vulnerability exists that allows a     remote attacker to disclose sensitive information.
    (CVE-2016-4178)

  - Multiple type confusion errors exist that allow a remote     attacker to execute arbitrary code. (CVE-2016-4223,     CVE-2016-4224, CVE-2016-4225)

  - An unspecified memory leak issue exists that allows an     attacker to have an unspecified impact. (CVE-2016-4232)

  - A race condition exists that allows a remote attacker to     disclose sensitive information. (CVE-2016-4247)

  - A heap buffer overflow condition exists that allows a     remote attacker to execute arbitrary code.
    (CVE-2016-4249)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 22.0.0.192. It is, therefore, affected by multiple vulnerabilities :

  - Multiple memory corruption issues exist that allow a     remote attacker to execute arbitrary code.
    (CVE-2016-4172, CVE-2016-4175, CVE-2016-4179,     CVE-2016-4180, CVE-2016-4181, CVE-2016-4182,     CVE-2016-4183, CVE-2016-4184, CVE-2016-4185,     CVE-2016-4186, CVE-2016-4187, CVE-2016-4188,     CVE-2016-4189, CVE-2016-4190, CVE-2016-4217,     CVE-2016-4218, CVE-2016-4219, CVE-2016-4220,     CVE-2016-4221, CVE-2016-4233, CVE-2016-4234,     CVE-2016-4235, CVE-2016-4236, CVE-2016-4237,     CVE-2016-4238, CVE-2016-4239, CVE-2016-4240,     CVE-2016-4241, CVE-2016-4242, CVE-2016-4243,     CVE-2016-4244, CVE-2016-4245, CVE-2016-4246)

  - Multiple use-after-free errors exist that allow a remote     attacker to execute arbitrary code. (CVE-2016-4173,     CVE-2016-4174, CVE-2016-4222, CVE-2016-4226,     CVE-2016-4227, CVE-2016-4228, CVE-2016-4229,     CVE-2016-4230, CVE-2016-4231, CVE-2016-4248,     CVE-2016-7020)

  - Multiple stack corruption issues exist that allow a     remote attacker to execute arbitrary code.
    (CVE-2016-4176, CVE-2016-4177)

  - A security bypass vulnerability exists that allows a     remote attacker to disclose sensitive information.
    (CVE-2016-4178)

  - Multiple type confusion errors exist that allow a remote     attacker to execute arbitrary code. (CVE-2016-4223,     CVE-2016-4224, CVE-2016-4225)

  - An unspecified memory leak issue exists that allows an     attacker to have an unspecified impact. (CVE-2016-4232)

  - A race condition exists that allows a remote attacker to     disclose sensitive information. (CVE-2016-4247)

  - A heap buffer overflow condition exists that allows a     remote attacker to execute arbitrary code.
    (CVE-2016-4249)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 22.0.0.192. It is, therefore, affected by multiple Vulnerabilities :

  - Multiple memory corruption issues exist that allow a     remote attacker to execute arbitrary code.
    (CVE-2016-4172, CVE-2016-4175, CVE-2016-4179,     CVE-2016-4180, CVE-2016-4181, CVE-2016-4182,     CVE-2016-4183, CVE-2016-4184, CVE-2016-4185,     CVE-2016-4186, CVE-2016-4187, CVE-2016-4188,     CVE-2016-4189, CVE-2016-4190, CVE-2016-4217,     CVE-2016-4218, CVE-2016-4219, CVE-2016-4220,     CVE-2016-4221, CVE-2016-4233, CVE-2016-4234,     CVE-2016-4235, CVE-2016-4236, CVE-2016-4237,     CVE-2016-4238, CVE-2016-4239, CVE-2016-4240,     CVE-2016-4241, CVE-2016-4242, CVE-2016-4243,     CVE-2016-4244, CVE-2016-4245, CVE-2016-4246)

  - Multiple use-after-free errors exist that allow a remote     attacker to execute arbitrary code. (CVE-2016-4173,     CVE-2016-4174, CVE-2016-4222, CVE-2016-4226,     CVE-2016-4227, CVE-2016-4228, CVE-2016-4229,     CVE-2016-4230, CVE-2016-4231, CVE-2016-4248,     CVE-2016-7020)

  - Multiple stack corruption issues exist that allow a     remote attacker to execute arbitrary code.
    (CVE-2016-4176, CVE-2016-4177)

  - A security bypass vulnerability exists that allows a     remote attacker to disclose sensitive information.
    (CVE-2016-4178)

  - Multiple type confusion errors exist that allow a remote     attacker to execute arbitrary code. (CVE-2016-4223,     CVE-2016-4224, CVE-2016-4225)

  - An unspecified memory leak issue exists that allows an     attacker to have an unspecified impact. (CVE-2016-4232)

  - A race condition exists that allows a remote attacker to     disclose sensitive information. (CVE-2016-4247)

  - A heap buffer overflow condition exists that allows a     remote attacker to execute arbitrary code.
    (CVE-2016-4249)

ID	Name	Product	Family	Type	Severity
92044	RHEL 5 / 6 : flash-plugin (RHSA-2016:1423)	Nessus	Red Hat Local Security Checks	Local	critical
92024	MS16-093: Security Update for Adobe Flash Player (3174060)	Nessus	Windows : Microsoft Bulletins	Local	critical
92013	Adobe Flash Player for Mac <= 22.0.0.192 Multiple Vulnerabilities (APSB16-25)	Nessus	MacOS X Local Security Checks	Local	critical
92012	Adobe Flash Player <= 22.0.0.192 Multiple Vulnerabilities (APSB16-25)	Nessus	Windows	Local	critical

Detections

Analytics

CVE-2016-7020

high

Tenable Plugins

critical

critical

critical

critical