Product:
Adobe Flash Player
Summary
Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors. This vulnerability was actively exploited in the wild in April 2016.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2016-1019 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted content to the affected version of Adobe Flash Player. If the user interacts with this content, it may lead to a crash of the application or allow the execution of arbitrary code, potentially compromising the system.
Affected Products
- Adobe Flash Player 21.0.0.197 and earlier: Vulnerable to denial of service and arbitrary code execution.
Mitigation
The impacted product is end-of-life and should be disconnected if still in use. Users are strongly advised to migrate to supported alternatives to avoid potential security risks.