Veille CVE
CVE-2016-4117
9.8 Critique Exploitée activement Utilisée par des rançongicielsCatalogue CISA KEV — Adobe Flash Player Arbitrary Code Execution Vulnerability
Ajoutée le 03/03/2022 · Échéance de correction (agences US) : 24/03/2022
Action requise : The impacted product is end-of-life and should be disconnected if still in use.
Description
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 9.8 Critique | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 7.8 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 2.0 | 10.0 Élevée | nvd@nist.gov (NVD) | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Références
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00046.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00047.html Mailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1079.html Third Party Advisory
- http://www.securityfocus.com/bid/90505 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1035826 Broken LinkThird Party AdvisoryVDB Entry
- https://helpx.adobe.com/security/products/flash-player/apsa16-02.html Broken LinkVendor Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb16-15.html Broken Link
- https://security.gentoo.org/glsa/201606-08 Third Party Advisory
- https://www.exploit-db.com/exploits/46339/ ExploitThird Party AdvisoryVDB Entry
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00046.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00047.html Mailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2016-1079.html Third Party Advisory
- http://www.securityfocus.com/bid/90505 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1035826 Broken LinkThird Party AdvisoryVDB Entry
- https://helpx.adobe.com/security/products/flash-player/apsa16-02.html Broken LinkVendor Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb16-15.html Broken Link
- https://security.gentoo.org/glsa/201606-08 Third Party Advisory
- https://www.exploit-db.com/exploits/46339/ ExploitThird Party AdvisoryVDB Entry
- https://github.com/cisagov/vulnrichment/issues/196 Issue Tracking
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4117 US Government Resource