VulnerabilityModified
CVE-2016-7866
Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability.
CRITICAL 9.8EPSS 15.8%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 15.8%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVSS 3.0
- 9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 15.78% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- adobe/animate
- Source
- psirt@adobe.com
References
- http://hyp3rlinx.altervista.org/advisories/ADOBE-ANIMATE-MEMORY-CORRUPTION-VULNERABILITY.txt
- http://packetstormsecurity.com/files/140164/Adobe-Animate-15.2.1.95-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2016/Dec/45
- http://www.securityfocus.com/archive/1/539923/100/0/threaded
- http://www.securityfocus.com/bid/94872
- https://helpx.adobe.com/security/products/animate/apsb16-38.htmlPatch, Vendor Advisory
- https://www.exploit-db.com/exploits/40915/
- http://hyp3rlinx.altervista.org/advisories/ADOBE-ANIMATE-MEMORY-CORRUPTION-VULNERABILITY.txt
- http://packetstormsecurity.com/files/140164/Adobe-Animate-15.2.1.95-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2016/Dec/45
- http://www.securityfocus.com/archive/1/539923/100/0/threaded
- http://www.securityfocus.com/bid/94872
- https://helpx.adobe.com/security/products/animate/apsb16-38.htmlPatch, Vendor Advisory
- https://www.exploit-db.com/exploits/40915/
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.