critique
CVE-2016-4117
flash-plugin: multiple code execution issues fixed in APSB16-15
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
Le label propre à Trivy est CRITICAL. Critique selon NVD, Red Hat. Plus basse selon Ubuntu (moyenne).
Description
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.12.04.1 et 1 autres |
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.14.04.1 et 1 autres |
| ubuntu 15.10 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.15.10.1 et 1 autres |
| ubuntu 16.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.16.04.1 et 1 autres |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.621ubuntu0.16.04.1 |
Afficher les 9 entrées de 5 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin | 1:20160512.1-0ubuntu0.12.04.1 |
| ubuntu 12.04 | flashplugin-nonfree | 11.2.202.621ubuntu0.12.04.1 |
| ubuntu 14.04 | adobe-flashplugin | 1:20160512.1-0ubuntu0.14.04.1 |
| ubuntu 14.04 | flashplugin-nonfree | 11.2.202.621ubuntu0.14.04.1 |
| ubuntu 15.10 | adobe-flashplugin | 1:20160512.1-0ubuntu0.15.10.1 |
| ubuntu 15.10 | flashplugin-nonfree | 11.2.202.621ubuntu0.15.10.1 |
| ubuntu 16.04 | adobe-flashplugin | 1:20160512.1-0ubuntu0.16.04.1 |
| ubuntu 16.04 | flashplugin-nonfree | 11.2.202.621ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.621ubuntu0.16.04.1 |
Références
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00046.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00047.html
- http://rhn.redhat.com/errata/RHSA-2016-1079.html
- http://www.securityfocus.com/bid/90505
- http://www.securitytracker.com/id/1035826
- https://access.redhat.com/security/cve/CVE-2016-4117
Les 17 références
- https://github.com/cisagov/vulnrichment/issues/196
- https://helpx.adobe.com/security/products/flash-player/apsa16-02.html
- https://helpx.adobe.com/security/products/flash-player/apsb16-15.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-4117
- https://security.gentoo.org/glsa/201606-08
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4117
- https://www.cve.org/CVERecord?id=CVE-2016-4117
- https://www.exploit-db.com/exploits/46339/