CVE-2016-0967

HIGH

Adobe Flash Player <18.0.0.329,19.x,20.x - Memory Corruption

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-0967. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit leverages a stack corruption vulnerability in Adobe Flash Player when processing a malformed FLV file. The PoC requires loading a specifically crafted SWF file that references the malicious FLV, leading to potential remote code execution.

Description

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · textdosmultiple

https://www.exploit-db.com/exploits/39466

View Code ZIP pw:eip

This exploit leverages a stack corruption vulnerability in Adobe Flash Player when processing a malformed FLV file. The PoC requires loading a specifically crafted SWF file that references the malicious FLV, leading to potential remote code execution.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Adobe Flash Player (versions affected by CVE-2016-0967)

No auth needed

Prerequisites: Remote server to host the malicious SWF and FLV files · Victim interaction to load the SWF file

MITRE ATT&CK