crítica
CVE-2016-4117
flash-plugin: multiple code execution issues fixed in APSB16-15
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Red Hat. Más baja según Ubuntu (media).
Descripción
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.12.04.1 y 1 más |
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.14.04.1 y 1 más |
| ubuntu 15.10 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.15.10.1 y 1 más |
| ubuntu 16.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.16.04.1 y 1 más |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.621ubuntu0.16.04.1 |
Mostrar las 9 entradas de 5 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin | 1:20160512.1-0ubuntu0.12.04.1 |
| ubuntu 12.04 | flashplugin-nonfree | 11.2.202.621ubuntu0.12.04.1 |
| ubuntu 14.04 | adobe-flashplugin | 1:20160512.1-0ubuntu0.14.04.1 |
| ubuntu 14.04 | flashplugin-nonfree | 11.2.202.621ubuntu0.14.04.1 |
| ubuntu 15.10 | adobe-flashplugin | 1:20160512.1-0ubuntu0.15.10.1 |
| ubuntu 15.10 | flashplugin-nonfree | 11.2.202.621ubuntu0.15.10.1 |
| ubuntu 16.04 | adobe-flashplugin | 1:20160512.1-0ubuntu0.16.04.1 |
| ubuntu 16.04 | flashplugin-nonfree | 11.2.202.621ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.621ubuntu0.16.04.1 |
Referencias
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00046.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00047.html
- http://rhn.redhat.com/errata/RHSA-2016-1079.html
- http://www.securityfocus.com/bid/90505
- http://www.securitytracker.com/id/1035826
- https://access.redhat.com/security/cve/CVE-2016-4117
Las 17 referencias
- https://github.com/cisagov/vulnrichment/issues/196
- https://helpx.adobe.com/security/products/flash-player/apsa16-02.html
- https://helpx.adobe.com/security/products/flash-player/apsb16-15.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-4117
- https://security.gentoo.org/glsa/201606-08
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4117
- https://www.cve.org/CVERecord?id=CVE-2016-4117
- https://www.exploit-db.com/exploits/46339/