RULE(RULE ID:316808)

Rule General Information
Release Date: 2016-11-04
Rule Name: Adobe Flash AddProperty Use After Free Vulnerability -1 (CVE-2016-4108)
Severity:
CVE ID:
CNNVD ID:
Rule Protection Details
Description: Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors.
Impact: A remote user can create content that, when loaded by the target user, will execute arbitrary code on the target user's system.
Affected OS: Windows
Reference: MicrosoftSecurityBulletin:MS16-064
SecurityTrackerID:1035827
AdobeSecurityBulletins:apsb16-15
ExploitDB:39830
Solutions
Microsoft has released a patch MS16-064 to eliminate the vulnerability. The patch can be downloaded at http://technet.microsoft.com/security/bulletin/MS16-064