CVE-2016-1013

HIGH

Adobe Flash Player < 18.0.0.343, 19.x-21.x < 21.0.0.213, < 11.2.202.616 - Use-After-Free

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-1013. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit targets a use-after-free vulnerability in Adobe Flash Player, triggered by rendering multiple scripts. The PoC is unreliable and may require extended rendering time to crash the browser, but the underlying bug is confirmed in debug builds.

Description

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · textdoswindows

https://www.exploit-db.com/exploits/39778

View Code ZIP pw:eip

This exploit targets a use-after-free vulnerability in Adobe Flash Player, triggered by rendering multiple scripts. The PoC is unreliable and may require extended rendering time to crash the browser, but the underlying bug is confirmed in debug builds.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Racy

Target: Adobe Flash Player (version not specified)

No auth needed

Prerequisites: Victim must visit a malicious webpage hosting the exploit

MITRE ATT&CK