CVE-2016-4171

Warning

EPSS 24.52%
Published 16.06.2016 14:59:51
Last modified 12.04.2025 10:46:40
Source psirt@adobe.com
Teams watchlist Login
Open Login

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.

Affected products Warnungen 1 Metrics 4 CWE 0 References 13

Data is provided by the National Vulnerability Database (NVD)

Adobe ≫ Flash Player Version <= 11.2.202.621

Linux ≫ Linux Kernel Version-

Adobe ≫ Flash Player Version <= 21.0.0.242

   Apple ≫ macOS X
   Apple ≫ macOS
   Microsoft ≫ Windows

Adobe ≫ Flash Player SwPlatformchrome Version <= 21.0.0.242

   Apple ≫ macOS X
   Apple ≫ macOS
   Google ≫ Chrome Os
   Linux ≫ Linux Kernel
   Microsoft ≫ Windows

Adobe ≫ Flash Player SwPlatforminternet_explorer Version <= 21.0.0.242

Microsoft ≫ Windows 8.1

Adobe ≫ Flash Player SwEditionesr Version <= 18.0.0.352

   Apple ≫ macOS X
   Apple ≫ macOS
   Microsoft ≫ Windows

Adobe ≫ Flash Player SwPlatformedge Version <= 21.0.0.242

Microsoft ≫ Windows 10

Adobe ≫ Flash Player SwPlatforminternet_explorer Version <= 21.0.0.242

Microsoft ≫ Windows 10

Redhat ≫ Enterprise Linux Desktop Version5.0

Redhat ≫ Enterprise Linux Desktop Version6.0

Redhat ≫ Enterprise Linux Server Version5.0

Redhat ≫ Enterprise Linux Server Version6.0

Redhat ≫ Enterprise Linux Workstation Version5.0

Redhat ≫ Enterprise Linux Workstation Version6.0

Opensuse ≫ Opensuse Version13.1

Opensuse ≫ Opensuse Version13.2

Suse ≫ Linux Enterprise Desktop Version12 Update-

Suse ≫ Linux Enterprise Desktop Version12 Updatesp1

Suse ≫ Linux Enterprise Workstation Extension Version12

Suse ≫ Linux Enterprise Workstation Extension Version12 Updatesp1

25.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Adobe Flash Player Remote Code Execution Vulnerability

Vulnerability

Unspecified vulnerability in Adobe Flash Player allows for remote code execution.

Description

The impacted product is end-of-life and should be disconnected if still in use.

Required actions

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	24.52%	0.959

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H