cve/2016/CVE-2016-1011.md

### [CVE-2016-1011](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1011)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1013, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.

### POC

#### Reference
- http://packetstormsecurity.com/files/137050/Adobe-Flash-MovieClip.duplicateMovieClip-Use-After-Free.html
- https://www.exploit-db.com/exploits/39779/

#### Github
- https://github.com/Live-Hack-CVE/CVE-2016-1011
- https://github.com/Live-Hack-CVE/CVE-2016-1013
- https://github.com/Live-Hack-CVE/CVE-2016-1016
- https://github.com/Live-Hack-CVE/CVE-2016-1017
- https://github.com/Live-Hack-CVE/CVE-2016-1031