kritisch
CVE-2016-4117
flash-plugin: multiple code execution issues fixed in APSB16-15
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Red Hat. Niedriger laut Ubuntu (mittel).
Beschreibung
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.12.04.1 und 1 weitere |
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.14.04.1 und 1 weitere |
| ubuntu 15.10 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.15.10.1 und 1 weitere |
| ubuntu 16.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.16.04.1 und 1 weitere |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.621ubuntu0.16.04.1 |
Alle 9 Einträge aus 5 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin | 1:20160512.1-0ubuntu0.12.04.1 |
| ubuntu 12.04 | flashplugin-nonfree | 11.2.202.621ubuntu0.12.04.1 |
| ubuntu 14.04 | adobe-flashplugin | 1:20160512.1-0ubuntu0.14.04.1 |
| ubuntu 14.04 | flashplugin-nonfree | 11.2.202.621ubuntu0.14.04.1 |
| ubuntu 15.10 | adobe-flashplugin | 1:20160512.1-0ubuntu0.15.10.1 |
| ubuntu 15.10 | flashplugin-nonfree | 11.2.202.621ubuntu0.15.10.1 |
| ubuntu 16.04 | adobe-flashplugin | 1:20160512.1-0ubuntu0.16.04.1 |
| ubuntu 16.04 | flashplugin-nonfree | 11.2.202.621ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.621ubuntu0.16.04.1 |
Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00046.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00047.html
- http://rhn.redhat.com/errata/RHSA-2016-1079.html
- http://www.securityfocus.com/bid/90505
- http://www.securitytracker.com/id/1035826
- https://access.redhat.com/security/cve/CVE-2016-4117
Alle 17 Referenzen
- https://github.com/cisagov/vulnrichment/issues/196
- https://helpx.adobe.com/security/products/flash-player/apsa16-02.html
- https://helpx.adobe.com/security/products/flash-player/apsb16-15.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-4117
- https://security.gentoo.org/glsa/201606-08
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4117
- https://www.cve.org/CVERecord?id=CVE-2016-4117
- https://www.exploit-db.com/exploits/46339/