Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class related to bookmarking in searches. Successful exploitation could lead to arbitrary code execution.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7867
Reference (s):
- BID:94871
- URL: http://www.securityfocus.com/bid/94871
- https://helpx.adobe.com/security/products/flash-player/apsb16-39.html
- GENTOO:GLSA-201701-17
- URL: https://security.gentoo.org/glsa/201701-17