Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Patches » APSB16-15

Overview

Id APSB16-15
Name APSB16-15 Adobe AIR 21.0.0.215 for Mac OS X (See Notes)
Vendor Name adobe
Product AIR
Content Type Critical Critical
Language(s)
Operating System(s) OSX 
Released On 12 May 2016 12:00:00

APSB16-15

APSB16-15 Adobe AIR 21.0.0.215 for Mac OS X (See Notes)

Vendor Name

adobe

Product

AIR

Released On

12 May 2016 12:00:00

Url

http://helpx.adobe.com/security/products/flash-player/apsb16-15.html

Description

AIR is a cross-platform run-time system developed by Adobe Systems for building Rich Internet Applications (RIA) that can be run as desktop applications or on mobile devices.

AIR 21.0.0.215 addresses the following security issues:

  • CVE-2016-1105, CVE-2016-4117: Resolve type confusion vulnerabilities that could lead to code execution
  • CVE-2016-1097, CVE-2016-1106, CVE-2016-1107, CVE-2016-1108, CVE-2016-1109, CVE-2016-1110, CVE-2016-4108, CVE-2016-4110: Resolve use-after-free vulnerabilities that could lead to code execution
  • CVE-2016-1101: Resolves a heap buffer overflow vulnerability that could lead to code execution
  • CVE-2016-1103: Resolves a buffer overflow vulnerability that could lead to code execution
  • CVE-2016-1096, CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1102, CVE-2016-1104, CVE-2016-4109, CVE-2016-4111, CVE-2016-4112, CVE-2016-4113, CVE-2016-4114, CVE-2016-4115: Resolve memory corruption vulnerabilities that could lead to code execution
  • CVE-2016-4116: Resolves a vulnerability in the directory search path used to find resources that could lead to code execution

  • Notes:
  • Due to a known Adobe AIR issue (internal bug #2827334) deployment will fail when no users are logged in locally


  • Related Resources

    Related Vulnerabilities

    None

    Related Patches

    Superseded Patches


    Last Updated: 27 May 2016 11:23:39