Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
hackeroneHhj4ckH1:119653
HistoryMar 01, 2016 - 8:01 a.m.

Internet Bug Bounty: Adobe Flash Player ASnative(900,1).call(MovieClip) Use-After-Free Vulnerability

2016-03-0108:01:33
hhj4ck
hackerone.com
21

0.019 Low

EPSS

Percentile

88.4%

JSON

I. Summary
Adobe Flash Player is prone to a vulnerability which leads to Use-After-Free.

II. Description
If the ASnative(900,1) is invoked with MovieClip instance and getter properties associated with swfRoot where the getter method includes a call to removeMovieClip(), the MovieClip instance is used after it is freed.

Latest version of Adobe Flash Player 20.0.0.267 has been tested under Windows 7.

III. Impact
Use-After-Free

IV. Credit
Wen Guanxing from Venustech ADLAB is credited for this vulnerability.

It has been assigned by Adobe as CVE-2016-0982
https://helpx.adobe.com/security/products/flash-player/apsb16-04.html

Related

checkpoint_advisories 1
cve 6
ubuntucve 6
prion 6
cvelist 6
attackerkb 3
nvd 6
nessus 12
openvas 12
suse 4
altlinux 2
freebsd 1
kaspersky 2
mageia 1
redhat 1
gentoo 1
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Use After Free Code Execution (APSB16-04: CVE-2016-0982)
2016-02-14 00:00:00
cve
cve
CVE-2016-0975
2016-02-10 20:59:23
CVE-2016-0982
2016-02-10 20:59:30
CVE-2016-0983
2016-02-10 20:59:31
ubuntucve
ubuntucve
CVE-2016-0975
2016-02-10 00:00:00
CVE-2016-0982
2016-02-10 00:00:00
CVE-2016-0983
2016-02-10 00:00:00
prion
prion
Design/Logic Flaw
2016-02-10 20:59:00
Design/Logic Flaw
2016-02-10 20:59:00
Design/Logic Flaw
2016-02-10 20:59:00
cvelist
cvelist
CVE-2016-0974
2016-02-10 20:00:00
CVE-2016-0983
2016-02-10 20:00:00
CVE-2016-0975
2016-02-10 20:00:00
attackerkb
attackerkb
CVE-2016-0983
2016-02-10 00:00:00
CVE-2016-0984
2016-02-10 00:00:00
CVE-2016-0973
2016-02-10 00:00:00
nvd
nvd
CVE-2016-0984
2016-02-10 20:59:32
CVE-2016-0982
2016-02-10 20:59:30
CVE-2016-0983
2016-02-10 20:59:31
nessus
nessus
Adobe AIR < 20.0.0.260 Multiple Vulnerabilities (APSB16-04)
2016-03-30 00:00:00
FreeBSD : flash -- multiple vulnerabilities (5d8e56c3-9e67-4d5b-81c9-3a409dfd705f)
2016-02-11 00:00:00
openSUSE Security Update : flash-player (openSUSE-2016-183)
2016-02-11 00:00:00
openvas
openvas
Adobe Flash Player Within Google Chrome Security Update (APSB16-04) - Linux
2017-03-18 00:00:00
Adobe Flash Player Multiple Vulnerabilities -01 (Feb 2016) - Windows
2016-02-10 00:00:00
Adobe Flash Player Within Google Chrome Security Update (APSB16-04) - Windows
2017-03-18 00:00:00
suse
suse
Security update for flash-player (important)
2016-02-10 13:11:33
Security update for flash-player (important)
2016-02-10 13:12:35
Security update for flash-player (important)
2016-02-10 22:11:01
altlinux
altlinux
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt59
2016-02-11 00:00:00
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt59
2016-02-11 00:00:00
freebsd
freebsd
flash -- multiple vulnerabilities
2016-02-09 00:00:00
kaspersky
kaspersky
KLA10758 Obsolete Adobe Flash Player for Windows
2016-02-09 00:00:00
KLA10756 Arbitrary code execution in Adobe Flash Player & AIR
2016-02-09 00:00:00
mageia
mageia
Updated flash-player-plugin packages fix security vulnerabilities
2016-02-09 22:05:34
redhat
redhat
(RHSA-2016:0166) Critical: flash-plugin security update
2016-02-10 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2016-03-12 00:00:00

0.019 Low

EPSS

Percentile

88.4%

JSON
Related for H1:119653
checkpoint_advisories1cve6ubuntucve6prion6cvelist6attackerkb3nvd6nessus12openvas12suse4altlinux2freebsd1kaspersky2mageia1redhat1gentoo1