Adobe · Flash Player and AIR
CVE-2016-0984
Adobe Flash Player and AIR Use-After-Free Vulnerability
무엇인가
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.
CISA: Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.
할 일
The impacted products are end-of-life and should be disconnected if still in use.
미국 연방 기관 조치 기한: 2022년 6월 15일
- CISA 목록에 추가됨
- 2022년 5월 25일
- 게시됨
- 2016년 2월 10일
- 심각도
- 높음 8.8 CVSS 3.1
- 향후 30일 내 공격 가능성(EPSS)
- 55% 알려진 모든 취약점 중 상위 1.0%
- 약점 유형
- CWE-416
- 자세히
- NVD · CVE.org · CISA
모든 참고 자료(9)
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html
- https://security.gentoo.org/glsa/201603-07
- http://rhn.redhat.com/errata/RHSA-2016-0166.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html
- https://www.exploit-db.com/exploits/39462/
- http://www.securitytracker.com/id/1034970
- https://helpx.adobe.com/security/products/flash-player/apsb16-04.html
Adobe의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2022. 5. 25. | Integer Overflow | Flash Player and AIR | 높음 8.8 | 19% |
| 2026. 10. 27. | Unrestricted Upload of File with Dangerous Type | Commerce and Magento | 치명적 9.3 | 31% |
| 2026. 9. 24. | Commerce and Magento Incorrect Authorization Vulnerability | Commerce and Magento | 치명적 9.1 | 90% |
| 2026. 9. 8. | Improper Neutralization of Special Elements Used in a Template Engine | Commerce and Magento | 치명적 10.0 | 3.9% |
| 2026. 7. 7. | Path Traversal | ColdFusion | 치명적 10.0 | 42% |
| 2026. 5. 20. | Heap-Based Buffer Overflow | Acrobat and Reader | 높음 8.8 | 87% |
| 2026. 4. 13. | Use-After-Free | Acrobat | 높음 7.8 | 33% |
| 2026. 4. 13. | Prototype Pollution | Acrobat and Reader | 높음 8.6 | 7.2% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.