PT-2016-1952 · Adobe+4 · Flash Player+5

Published 2016-05-11 · Updated 2018-10-12 · CVE-2016-4108

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 21.0.0.213 and earlier

Description The issue is related to unspecified vulnerabilities in Adobe Flash Player, which is used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge. It has unknown impact and attack vectors. The vulnerability is different from others listed in MS16-064. Exploitation of this vulnerability may allow a remote attacker to affect the integrity, availability, and confidentiality of information.

Recommendations For Adobe Flash Player versions 21.0.0.213 and earlier, update to a version later than 21.0.0.213 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-17

Related Identifiers

ALT-PU-2016-1496

BDU:2016-01285

CVE-2016-4108

MGASA-2016-0173

RHSA-2016:1079

RHSA-2016_1079

SUSE-SU-2016:1305-1

Affected Products

Alt Linux

Flash Player

Edge

Internet Explorer

Red Hat

Suse

References · 66

• 🔥 https://exploit-db.com/exploits/39830 · Exploit
• http://rhn.redhat.com/errata/RHSA-2016-1079.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0173 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1305-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0173.html · Security Note
• https://bdu.fstec.ru/vul/2016-01285 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-064 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4108 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4108 · Security Note
• https://suse.com/security/cve/CVE-2016-1097 · Note
• https://suse.com/security/cve/CVE-2016-1020 · Note
• https://suse.com/security/cve/CVE-2016-1096 · Note
• https://suse.com/security/cve/CVE-2016-1104 · Note
• https://suse.com/security/cve/CVE-2016-1017 · Note