CVEs-PoC/2016/CVE-2016-1011.md

CVE-2016-1011

Description

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1013, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.

POC

Reference

• http://packetstormsecurity.com/files/137050/Adobe-Flash-MovieClip.duplicateMovieClip-Use-After-Free.html
• http://packetstormsecurity.com/files/137050/Adobe-Flash-MovieClip.duplicateMovieClip-Use-After-Free.html
• https://www.exploit-db.com/exploits/39779/
• https://www.exploit-db.com/exploits/39779/

Github

• https://github.com/Live-Hack-CVE/CVE-2016-1011
• https://github.com/Live-Hack-CVE/CVE-2016-1013
• https://github.com/Live-Hack-CVE/CVE-2016-1016
• https://github.com/Live-Hack-CVE/CVE-2016-1017
• https://github.com/Live-Hack-CVE/CVE-2016-1031