CVE-2016-0985: adobe air_desktop_runtime Type Confusion

CVSS: 9.3v2.0HighModified

AliasesUBUNTU-CVE-2016-0985

Published 10-02-2016Last modified 05-08-2024

Vulnerability summary

CVE-2016-0985 is a high (CVSS 9.3) Type Confusion vulnerability in adobe air_desktop_runtime. EPSS estimates a 26.08% chance of exploitation in the next 30 days, higher than 97.9% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

26.08%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 4 · Related 2

MGASA-2016-0062 RHSA-2016:0166 SUSE-SU-2016:0398-1 SUSE-SU-2016:0400-1

Timeline

10-02-2016
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion."

CVSS metrics

4 scores · 2 sources · 3 versions

v3.18.8v3.08.8v2.09.3

EPSS trend

Probability

26.08%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 26.08% on 20-09-2026

20-09-202620-10-2026

EPSS score

26.08%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedosmultipleVerified
Adobe Flash - textfield Constructor Type Confusion
Maturity: poc

Weaknesses

CWE · root cause

CWE-843Access of Resource Using Incompatible Type ('Type Confusion')The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Affected systems

Adobe5 products

air_desktop_runtime≤ 20.0.0.233
air_sdk≤ 20.0.0.233
air_sdk_\&_compiler≤ 20.0.0.233
flash_player≤ 11.2.202.559 | ≤ 18.0.0.326 | ≤ 20.0.0.272 | ≤ 20.0.0.286
flash_player_desktop_runtime≤ 20.0.0.286

Ubuntu1 product

flashplugin-nonfree< 11.2.202.569ubuntu0.14.04.1

2 vendors · 6 products

References

11 links

lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.htmlVendor AdvisoryX Refsource SUSEBroken LinkThird Party Advisory
www.securitytracker.com/id/1034970VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
www.exploit-db.com/exploits/39461/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
security.gentoo.org/glsa/201603-07Vendor AdvisoryX Refsource GENTOOThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-0166.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-02/msg00030.htmlVendor AdvisoryX Refsource SUSEBroken LinkThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.htmlVendor AdvisoryX Refsource SUSEBroken LinkThird Party Advisory
helpx.adobe.com/security/products/flash-player/apsb16-04.htmlX Refsource CONFIRMPatchVendor AdvisoryREPORT
lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.htmlVendor AdvisoryX Refsource SUSEBroken LinkThird Party Advisory
ubuntu.com/security/CVE-2016-0985REPORT

Show all 11 references

www.cve.org/CVERecord?id=CVE-2016-0985REPORT

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities