PT-2016-2945 · Adobe+3 · Flash Player+3

CVE-2016-7890

·

Published

2016-12-14

·

Updated

2022-11-16

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 23.0.0.207 and earlier Adobe Flash Player versions 11.2.202.644 and earlier
Description The issue is related to a security bypass vulnerability in the implementation of the same origin policy. This vulnerability is associated with errors in security settings, allowing a remote attacker to compromise the integrity, availability, and confidentiality of information. The exploitation of this vulnerability can enable a remote attacker to bypass security mechanisms.
Recommendations For Adobe Flash Player versions 23.0.0.207 and earlier, update to a version later than 23.0.0.207 to resolve the issue. For Adobe Flash Player versions 11.2.202.644 and earlier, update to a version later than 11.2.202.644 to resolve the issue. As a temporary workaround, consider restricting access to sensitive information and implementing additional security measures to minimize the risk of exploitation.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2016-2445
BDU:2016-02376
BDU:2017-00017
BDU:2017-00030
CVE-2016-7890
MGASA-2017-0014
RHSA-2016:2947
RHSA-2016_2947
SUSE-SU-2016:3148-1

Affected Products

Alt Linux
Flash Player
Red Hat
Suse