CVE-2016-4171
Critical · 9.8 CISA KEVCVSS
9.8
EPSS
20.1%
Published
Jun 16, 2016
CISA due date
Apr 15, 2022
The record
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:5 | flash-player-plugin | 0 | 11.2.202.626-1.1.mga5.nonfree |
| Red Hat:rhel_extras:5::client | flash-plugin | 0 | 0:11.2.202.626-1.el5_11 |
| Red Hat:rhel_extras:5::server | flash-plugin | 0 | 0:11.2.202.626-1.el5_11 |
| Red Hat:rhel_extras:6 | flash-plugin | 0 | 0:11.2.202.626-1.el6_8 |
| SUSE:Linux Enterprise Desktop 12 | flash-player | 0 | 11.2.202.626-133.1 |
| SUSE:Linux Enterprise Desktop 12 SP1 | flash-player | 0 | 11.2.202.626-133.1 |
| SUSE:Linux Enterprise Workstation Extension 12 | flash-player | 0 | 11.2.202.626-133.1 |
| SUSE:Linux Enterprise Workstation Extension 12 SP1 | flash-player | 0 | 11.2.202.626-133.1 |
| Ubuntu:14.04:LTS | flashplugin-nonfree | 0 | 11.2.202.626ubuntu0.14.04.1 |
| Ubuntu:16.04:LTS | flashplugin-nonfree | 0 | 11.2.202.626ubuntu0.16.04.1 |
Related vulnerabilities
- CVE-2017-11281 Adobe Flash Player has an exploitable memory corruption vulnerability in the text… Also affects flash-player-plugin
- CVE-2017-11282 Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom… Also affects flash-player-plugin
- CVE-2017-11292 Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification… Also affects flash-player-plugin
- CVE-2017-3106 Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion… Also affects flash-player-plugin
- CVE-2017-3077 Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption… Also affects flash-player-plugin
- CVE-2017-3076 Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption… Also affects flash-player-plugin
- CVE-2017-3083 Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free… Also affects flash-player-plugin
- CVE-2017-3082 Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption… Also affects flash-player-plugin