CVE:CVE-2016-0959
CNNVD:CNNVD-201706-1136
Adobe Flash Player是美国奥多比（Adobe）公司的一款跨平台、基于浏览器的多媒体播放器产品。该产品支持跨屏幕和浏览器查看应用程序、内容和视频。
Adobe Flash Player中存在释放后重用漏洞。攻击者可利用该漏洞执行代码。以下产品和版本受到影响：基于Windows和Macintosh平台的Adobe Flash Player Desktop Runtime 20.0.0.235及之前的版本；基于Windows和Macintosh平台的Adobe Flash Player Extended Support Release 18.0.0.268及之前的版本；基于基于Windows、Macintosh、Linux和ChromeOS平台的Adobe Flash Player for Google Chrome 20.0.0.228及之前的版本；基于Windows 10平台的Adobe Flash Player for Microsoft Edge和Internet Explorer 11 20.0.0.228及之前的版本；基于Windows 8.0和8.1平台的Adobe Flash Player for Internet Explorer 10和11 20.0.0.228及之前的版本；Adobe Flash Player for Linux 11.2.202.554及之前的版本；基于Windows和Macintosh平台的AIR Desktop Runtime 20.0.0.204及之前的版本；基于Windows、Macintosh、Android和iOS平台的AIR SDK 20.0.0.2O4及之前的版本；基于基于Windows、Macintosh、Android和iOS平台的AIR SDK和Compiler 20.0.0.204及之前的版本；AIR for Android 20.0.0.204及之前的版本。
solution:Upgrade adobe flash_player to a higher version than 20.0.0.235,20.0.0.228,and avoid the version (,20.0.0.235],(,20.0.0.228]; Upgrade adobe flash_player_extended_support_release to a higher version than 18.0.0.268,and avoid the version (,18.0.0.268]; Upgrade adobe flash_player_for_linux to a higher version than 11.2.202.554,and avoid the version (,11.2.202.554]; Upgrade adobe air to a higher version than 20.0.0.204,and avoid the version (,20.0.0.204]; Upgrade adobe air_sdk_&_compiler to a higher version than 20.0.0.204,and avoid the version (,20.0.0.204]; Upgrade adobe air_sdk to a higher version than 20.0.0.204,and avoid the version (,20.0.0.204]