CVEs-PoC/2016/CVE-2016-4230.md

CVE-2016-4230

Description

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4231, and CVE-2016-4248.

POC

Reference

• http://packetstormsecurity.com/files/138532/Adobe-Flash-MovieClip-Transform-Use-After-Free.html
• http://packetstormsecurity.com/files/138532/Adobe-Flash-MovieClip-Transform-Use-After-Free.html
• https://www.exploit-db.com/exploits/40311/
• https://www.exploit-db.com/exploits/40311/

Github

• https://github.com/Live-Hack-CVE/CVE-2016-4222
• https://github.com/Live-Hack-CVE/CVE-2016-4226
• https://github.com/Live-Hack-CVE/CVE-2016-4227
• https://github.com/Live-Hack-CVE/CVE-2016-4228
• https://github.com/Live-Hack-CVE/CVE-2016-4229
• https://github.com/Live-Hack-CVE/CVE-2016-4230
• https://github.com/Live-Hack-CVE/CVE-2016-4231
• https://github.com/Live-Hack-CVE/CVE-2016-4248
• https://github.com/Live-Hack-CVE/CVE-2016-7020