Skip to content
OpenAdvisories
Unscored CVE-2016-4249 EUVD-2016-5249GHSA-wj44-vm9q-56xc

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 1…

Published Jul 13, 2016 · Updated Aug 6, 2024 · Assigned by adobe

Description

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS flashplugin-nonfree 11.2.202.632ubuntu0.16.04.1 —
Ubuntu 14.04 LTS flashplugin-nonfree 11.2.202.632ubuntu0.14.04.1 —
ReleasePackageFixed inAdvisory
RHEL 6 flash-plugin 11.2.202.632-1.el6_8 RHSA-2016:1423
RHEL 5 flash-plugin 11.2.202.632-1.el5_11 RHSA-2016:1423
ReleasePackageFixed inAdvisory
SLES 12 SP1 flash-player 11.2.202.632-137.1 SUSE-SU-2016:1826-1

Advisories 2

References