cve/2016/CVE-2016-1017.md

### [CVE-2016-1017](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1017)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, and CVE-2016-1031.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/Live-Hack-CVE/CVE-2016-1011
- https://github.com/Live-Hack-CVE/CVE-2016-1013
- https://github.com/Live-Hack-CVE/CVE-2016-1016
- https://github.com/Live-Hack-CVE/CVE-2016-1017
- https://github.com/Live-Hack-CVE/CVE-2016-1031