Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Patches » APSB16-10

Overview

Id APSB16-10
Name APSB16-10 Adobe Flash Player 18.0.0.343 ESR for Mac OS X (See Notes)
Vendor Name adobe
Product Flash Player (ESR)
Content Type Critical Critical
Language(s)
Operating System(s) OSX 
Released On 07 Apr 2016 12:00:00

APSB16-10

APSB16-10 Adobe Flash Player 18.0.0.343 ESR for Mac OS X (See Notes)

Vendor Name

adobe

Product

Flash Player (ESR)

Released On

07 Apr 2016 12:00:00

Url

http://helpx.adobe.com/security/products/flash-player/apsb16-10.html

Description

Adobe Flash Player Plugin Extended Support Release (ESR) is used to run content created on the Adobe Flash platform within a Netscape-compatible web browser with a more controlled release cycle.

Flash Player 18.0.0.343 addresses the following security issues:

  • CVE-2016-1006: Hardens a mitigation against JIT spraying attacks that could be used to bypass memory layout randomization mitigations
  • CVE-2016-1015, CVE-2016-1019: Resolve type confusion vulnerabilities that could lead to code execution
  • CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, CVE-2016-1017, CVE-2016-1031: Resolve use-after-free vulnerabilities that could lead to code execution
  • CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, CVE-2016-1033: Resolve memory corruption vulnerabilities that could lead to code execution
  • CVE-2016-1018: Resolves a stack overflow vulnerability that could lead to code execution
  • CVE-2016-1030: Resolves a security bypass vulnerability
  • More details can be found on the more info URL

  • Notes:
  • This update is applicable to Flash Player 10.x, 11.7.x (extended support versions 11.7.700.232 and higher), 13.0.x (extended support versions 13.0.0.214 and higher) and 18.0.x (extended support versions 18.0.0.232 and higher)


  • Related Resources

    Related Vulnerabilities

    None

    Related Patches

    Superseded Patches


    Last Updated: 27 May 2016 11:23:18