CVE-2016-4136
HIGHAdobe Flash Player <=21.0.0.242 - Second Exploit-Referenced Impact Unknown
Title source: manualExploitation Summary
EIP tracks 1 public exploit for CVE-2016-4136. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit demonstrates a heap overflow vulnerability in Adobe Flash when loading a maliciously crafted JXR file. The issue involves a Use-After-Free (UaF) of the plane->model_hp_buffer in the JXR component, leading to potential remote code execution.
Description
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Exploits (1)
This exploit demonstrates a heap overflow vulnerability in Adobe Flash when loading a maliciously crafted JXR file. The issue involves a Use-After-Free (UaF) of the plane->model_hp_buffer in the JXR component, leading to potential remote code execution.
References (8)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H