crítica
CVE-2016-4171
flash-plugin: multiple code execution issues fixed in APSB16-18
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Red Hat. Más baja según Ubuntu (media).
Descripción
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.12.04.1 y 1 más |
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.14.04.1 y 1 más |
| ubuntu 15.10 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.15.10.1 y 1 más |
| ubuntu 16.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.16.04.1 y 1 más |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.626ubuntu0.16.04.1 |
Mostrar las 9 entradas de 5 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin | 1:20160616.1-0ubuntu0.12.04.1 |
| ubuntu 12.04 | flashplugin-nonfree | 11.2.202.626ubuntu0.12.04.1 |
| ubuntu 14.04 | adobe-flashplugin | 1:20160616.1-0ubuntu0.14.04.1 |
| ubuntu 14.04 | flashplugin-nonfree | 11.2.202.626ubuntu0.14.04.1 |
| ubuntu 15.10 | adobe-flashplugin | 1:20160616.1-0ubuntu0.15.10.1 |
| ubuntu 15.10 | flashplugin-nonfree | 11.2.202.626ubuntu0.15.10.1 |
| ubuntu 16.04 | adobe-flashplugin | 1:20160616.1-0ubuntu0.16.04.1 |
| ubuntu 16.04 | flashplugin-nonfree | 11.2.202.626ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.626ubuntu0.16.04.1 |
Referencias
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html
- http://www.securityfocus.com/bid/91184
- http://www.securitytracker.com/id/1036094
- https://access.redhat.com/errata/RHSA-2016:1238
- https://access.redhat.com/security/cve/CVE-2016-4171
- https://github.com/cisagov/vulnrichment/issues/196
Las 16 referencias
- https://helpx.adobe.com/security/products/flash-player/apsa16-03.html
- https://helpx.adobe.com/security/products/flash-player/apsb16-18.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-4171
- https://security.gentoo.org/glsa/201606-08
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4171
- https://www.cve.org/CVERecord?id=CVE-2016-4171
- https://www.kb.cert.org/vuls/id/748992