KLA10831 Code execution vulnerability in Adobe AIR

An improper updates resolve was found in Adobe AIR. By exploiting this vulnerability malicious users can execute arbitrary code.

Original advisories

Adobe bulletin

Related products

Adobe-AIR

CVE list

CVE-2016-4126 critical

Solution

Update to the latest version

Get AIR

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Adobe AIR versions earlier than 22.0.0.153