CVE-2016-7868
Fixed in a distro release EPSS 11%
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to alternation functionality. Successful exploitation could lead to arbitrary code execution.
Products: adobe flash_player_desktop_runtime, adobe flash_player
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 6 | flash-plugin | 0:24.0.0.186-1.el6_8 |
| SUSE Linux Enterprise Desktop 12 SP1 | flash-player | 24.0.0.186-152.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | flash-player | 24.0.0.186-152.1 |