PT-2016-2781 · Adobe+3 · Flash Player+3

Published 2016-09-14 · Updated 2022-11-14 · CVE-2016-4271

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe Flash Player (affected versions not specified)

Description The issue allows an attacker to obtain confidential information or bypass existing access restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2016-1991

BDU:2016-02184

CVE-2016-4271

MGASA-2016-0315

OPENSUSE-SU-2016_2308-1

OPENSUSE-SU-2016_2376-1

RHSA-2016:1865

RHSA-2016_1865

SUSE-SU-2016:2312-1

Affected Products

Alt Linux

Flash Player

Red Hat

Suse

References · 45

• 🔥 https://blog.bjornweb.nl/2017/02/flash-bypassing-local-sandbox-data-exfiltration-credentials-leak · Exploit
• https://bdu.fstec.ru/vul/2016-02184 · Security Note
• http://rhn.redhat.com/errata/RHSA-2016-1865.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4271 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4271 · Security Note
• https://advisories.mageia.org/MGASA-2016-0315.html · Security Note
• https://helpx.adobe.com/security/products/flash-player/apsb16-29.html · Vendor Advisory
• https://security.gentoo.org/glsa/201610-10 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0315 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2312-1 · Vendor Advisory
• https://t.me/cvenotify/37652 · Telegram Post
• https://bugs.mageia.org/show_bug.cgi?id=19359 · Note
• https://suse.com/security/cve/CVE-2016-4182 · Note
• https://suse.com/security/cve/CVE-2016-6924 · Note
• https://suse.com/security/cve/CVE-2016-6930 · Note