kritisch
CVE-2016-4171
flash-plugin: multiple code execution issues fixed in APSB16-18
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Red Hat. Niedriger laut Ubuntu (mittel).
Beschreibung
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.12.04.1 und 1 weitere |
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.14.04.1 und 1 weitere |
| ubuntu 15.10 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.15.10.1 und 1 weitere |
| ubuntu 16.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.16.04.1 und 1 weitere |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.626ubuntu0.16.04.1 |
Alle 9 Einträge aus 5 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin | 1:20160616.1-0ubuntu0.12.04.1 |
| ubuntu 12.04 | flashplugin-nonfree | 11.2.202.626ubuntu0.12.04.1 |
| ubuntu 14.04 | adobe-flashplugin | 1:20160616.1-0ubuntu0.14.04.1 |
| ubuntu 14.04 | flashplugin-nonfree | 11.2.202.626ubuntu0.14.04.1 |
| ubuntu 15.10 | adobe-flashplugin | 1:20160616.1-0ubuntu0.15.10.1 |
| ubuntu 15.10 | flashplugin-nonfree | 11.2.202.626ubuntu0.15.10.1 |
| ubuntu 16.04 | adobe-flashplugin | 1:20160616.1-0ubuntu0.16.04.1 |
| ubuntu 16.04 | flashplugin-nonfree | 11.2.202.626ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.626ubuntu0.16.04.1 |
Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html
- http://www.securityfocus.com/bid/91184
- http://www.securitytracker.com/id/1036094
- https://access.redhat.com/errata/RHSA-2016:1238
- https://access.redhat.com/security/cve/CVE-2016-4171
- https://github.com/cisagov/vulnrichment/issues/196
Alle 16 Referenzen
- https://helpx.adobe.com/security/products/flash-player/apsa16-03.html
- https://helpx.adobe.com/security/products/flash-player/apsb16-18.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-4171
- https://security.gentoo.org/glsa/201606-08
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4171
- https://www.cve.org/CVERecord?id=CVE-2016-4171
- https://www.kb.cert.org/vuls/id/748992