critique
CVE-2016-4171
flash-plugin: multiple code execution issues fixed in APSB16-18
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
Le label propre à Trivy est CRITICAL. Critique selon NVD, Red Hat. Plus basse selon Ubuntu (moyenne).
Description
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.12.04.1 et 1 autres |
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.14.04.1 et 1 autres |
| ubuntu 15.10 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.15.10.1 et 1 autres |
| ubuntu 16.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160616.1-0ubuntu0.16.04.1 et 1 autres |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.626ubuntu0.16.04.1 |
Afficher les 9 entrées de 5 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin | 1:20160616.1-0ubuntu0.12.04.1 |
| ubuntu 12.04 | flashplugin-nonfree | 11.2.202.626ubuntu0.12.04.1 |
| ubuntu 14.04 | adobe-flashplugin | 1:20160616.1-0ubuntu0.14.04.1 |
| ubuntu 14.04 | flashplugin-nonfree | 11.2.202.626ubuntu0.14.04.1 |
| ubuntu 15.10 | adobe-flashplugin | 1:20160616.1-0ubuntu0.15.10.1 |
| ubuntu 15.10 | flashplugin-nonfree | 11.2.202.626ubuntu0.15.10.1 |
| ubuntu 16.04 | adobe-flashplugin | 1:20160616.1-0ubuntu0.16.04.1 |
| ubuntu 16.04 | flashplugin-nonfree | 11.2.202.626ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.626ubuntu0.16.04.1 |
Références
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html
- http://www.securityfocus.com/bid/91184
- http://www.securitytracker.com/id/1036094
- https://access.redhat.com/errata/RHSA-2016:1238
- https://access.redhat.com/security/cve/CVE-2016-4171
- https://github.com/cisagov/vulnrichment/issues/196
Les 16 références
- https://helpx.adobe.com/security/products/flash-player/apsa16-03.html
- https://helpx.adobe.com/security/products/flash-player/apsb16-18.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-4171
- https://security.gentoo.org/glsa/201606-08
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4171
- https://www.cve.org/CVERecord?id=CVE-2016-4171
- https://www.kb.cert.org/vuls/id/748992