9.3
CVE-2016-4166
- EPSS 3.94%
- Veröffentlicht 16.06.2016 14:59:49
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
LoginUnspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Flash Player Desktop Runtime Version <= 21.0.0.242
Adobe ≫ Flash Player SwEdition esr Version <= 18.0.0.352
Adobe ≫ Flash Player SwPlatform chrome Version <= 21.0.0.242
Adobe ≫ Flash Player SwPlatform edge Version <= 21.0.0.242
Adobe ≫ Flash Player SwPlatform internet_explorer Version <= 21.0.0.242
Adobe ≫ Flash Player Version <= 11.2.202.621
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.94% | 0.891 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| NIST | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html
http://www.securitytracker.com/id/1036117
https://access.redhat.com/errata/RHSA-2016:1238
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-083
https://helpx.adobe.com/security/products/flash-player/apsb16-18.html