CVE-2016-0965

HIGH

Adobe Flash Player <18.0.0.329, 19.x, 20.x - Memory Corruption

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-0965. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit demonstrates an out-of-bounds read vulnerability in image processing, where crafted width and height values can lead to invalid pointer access. The PoC is provided as a binary file, likely triggering the vulnerability when processed by the target software.

Description

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · textdosmultiple

https://www.exploit-db.com/exploits/39460

View Code ZIP pw:eip

This exploit demonstrates an out-of-bounds read vulnerability in image processing, where crafted width and height values can lead to invalid pointer access. The PoC is provided as a binary file, likely triggering the vulnerability when processed by the target software.

Classification

Working Poc 80%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: Unknown (likely an image processing library or application)

No auth needed

Prerequisites: Access to the target system to deliver the crafted file

MITRE ATT&CK