CVE-2016-7855
Fixed in a distro release ExploitedEPSS 25%CVSS 8.8
Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016.
Products: adobe flash_player, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 5 | flash-plugin | 0:11.2.202.643-1.el5_11 |
| Red Hat rhel extras 6 | flash-plugin | 0:11.2.202.643-1.el6_8 |
| SUSE Linux Enterprise Desktop 12 SP1 | flash-player | 11.2.202.643-146.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | flash-player | 11.2.202.643-146.1 |
| Ubuntu 14.04 LTS | flashplugin-nonfree | 11.2.202.643ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | flashplugin-nonfree | 11.2.202.643ubuntu0.16.04.1 |