PT-2016-1631 · Adobe+3 · Flash Player+3

Published 2016-04-07 · Updated 2026-02-23 · CVE-2016-1019

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 21.0.0.197 and earlier

Description The issue is related to errors in the code of the Flash Player platform, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors. This issue has been exploited in the wild in April 2016.

Recommendations For Adobe Flash Player versions 21.0.0.197 and earlier, update to a version later than 21.0.0.197 to resolve the issue. As a temporary workaround, consider disabling the Flash Player until a patch is available. Restrict access to potentially vulnerable vectors to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

ALT-PU-2016-1305

BDU:2016-00943

CVE-2016-1019

MGASA-2016-0134

OPENSUSE-SU-2016_0987-1

OPENSUSE-SU-2016_0997-1

OPENSUSE-SU-2016_1306-1

RHSA-2016:0610

RHSA-2016_0610

SUSE-SU-2016:0990-1

SUSE-SU-2016:1305-1

SUSE-SU-2016_0990-1

SUSE-SU-2016_1305-1

Affected Products

Alt Linux

Flash Player

Red Hat

Suse

References · 84

• https://osv.dev/vulnerability/SUSE-SU-2016:0990-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-1019 · Security Note
• http://blogs.adobe.com/psirt/?p=1330 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html · Vendor Advisory
• https://helpx.adobe.com/security/products/flash-player/apsa16-01.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-1019 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0134 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0610.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1019 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00943 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-1019 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1019 · Vendor Advisory
• https://security.gentoo.org/glsa/201606-08 · Vendor Advisory