Veille CVE
CVE-2016-4171
9.8 Critique Exploitée activementCatalogue CISA KEV — Adobe Flash Player Remote Code Execution Vulnerability
Ajoutée le 25/03/2022 · Échéance de correction (agences US) : 15/04/2022
Action requise : The impacted product is end-of-life and should be disconnected if still in use.
Description
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 9.8 Critique | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 7.8 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 2.0 | 10.0 Élevée | nvd@nist.gov (NVD) | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Références
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/91184 Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1036094 Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2016:1238 Third Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsa16-03.html Vendor Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb16-18.html Vendor Advisory
- https://security.gentoo.org/glsa/201606-08 Third Party Advisory
- https://www.kb.cert.org/vuls/id/748992 Third Party AdvisoryUS Government Resource
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/91184 Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1036094 Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2016:1238 Third Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsa16-03.html Vendor Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb16-18.html Vendor Advisory
- https://security.gentoo.org/glsa/201606-08 Third Party Advisory
- https://www.kb.cert.org/vuls/id/748992 Third Party AdvisoryUS Government Resource
- https://github.com/cisagov/vulnrichment/issues/196 Issue Tracking
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4171 US Government Resource