PT-2016-1962 · Adobe+4 · Flash Player+5

Published 2016-05-11 · Updated 2018-10-12 · CVE-2016-1110

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 21.0.0.213 and earlier Microsoft Internet Explorer versions 10 and 11 Microsoft Edge (affected versions not specified)

Description The issue is related to errors in the code of the Flash Player platform. Exploitation of this issue may allow a remote attacker to impact the integrity, availability, and confidentiality of information. The impact and attack vectors of this issue are unknown.

Recommendations For Adobe Flash Player versions 21.0.0.213 and earlier, update to a version later than 21.0.0.213. For Microsoft Internet Explorer versions 10 and 11, ensure Adobe Flash Player is updated to a version later than 21.0.0.213. For Microsoft Edge, update Adobe Flash Player to a version later than 21.0.0.213.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

ALT-PU-2016-1496

BDU:2016-01295

CVE-2016-1110

MGASA-2016-0173

RHSA-2016:1079

RHSA-2016_1079

SUSE-SU-2016:1305-1

Affected Products

Alt Linux

Flash Player

Edge

Internet Explorer

Red Hat

Suse

References · 64

• http://rhn.redhat.com/errata/RHSA-2016-1079.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0173 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1305-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1110 · Security Note
• https://advisories.mageia.org/MGASA-2016-0173.html · Security Note
• https://bdu.fstec.ru/vul/2016-01295 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-064 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1110 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html · Vendor Advisory
• https://suse.com/security/cve/CVE-2016-1097 · Note
• https://suse.com/security/cve/CVE-2016-1020 · Note
• https://suse.com/security/cve/CVE-2016-1096 · Note
• https://suse.com/security/cve/CVE-2016-1104 · Note
• https://suse.com/security/cve/CVE-2016-1017 · Note
• https://suse.com/security/cve/CVE-2016-1106 · Note