Candidate: CVE-2016-0992 PublicDate: 2016-03-12 15:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0992 https://helpx.adobe.com/security/products/flash-player/apsb16-08.html Description: Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-1002, and CVE-2016-1005. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: chriscoulson CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL] Patches_flashplugin-nonfree: upstream_flashplugin-nonfree: released (11.2.202.577) precise_flashplugin-nonfree: released (11.2.202.577ubuntu0.12.04.1) trusty_flashplugin-nonfree: released (11.2.202.577ubuntu0.14.04.1) trusty/esm_flashplugin-nonfree: DNE (trusty was released [11.2.202.577ubuntu0.14.04.1]) vivid/ubuntu-core_flashplugin-nonfree: DNE vivid/stable-phone-overlay_flashplugin-nonfree: DNE wily_flashplugin-nonfree: released (11.2.202.577ubuntu0.15.10.1) devel_flashplugin-nonfree: released (11.2.202.577ubuntu1) Patches_adobe-flashplugin: upstream_adobe-flashplugin: needs-triage precise_adobe-flashplugin: released (1:20160310.1-0ubuntu0.12.04.1) trusty_adobe-flashplugin: released (1:20160310.1-0ubuntu0.14.04.1) trusty/esm_adobe-flashplugin: DNE (trusty was released [1:20160310.1-0ubuntu0.14.04.1]) vivid/ubuntu-core_adobe-flashplugin: DNE vivid/stable-phone-overlay_adobe-flashplugin: DNE wily_adobe-flashplugin: released (1:20160310.1-0ubuntu0.15.10.1) devel_adobe-flashplugin: released (1:20160310.1-0ubuntu1)