CVE-2016-4117
flash-plugin: multiple code execution issues fixed in APSB16-15
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Red Hat. Daha düşük diyenler: Ubuntu (orta).
Açıklama
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.12.04.1 ve 1 tane daha |
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.14.04.1 ve 1 tane daha |
| ubuntu 15.10 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.15.10.1 ve 1 tane daha |
| ubuntu 16.04 | adobe-flashplugin, flashplugin-nonfree | 1:20160512.1-0ubuntu0.16.04.1 ve 1 tane daha |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.621ubuntu0.16.04.1 |
5 kaynaktaki 9 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin | 1:20160512.1-0ubuntu0.12.04.1 |
| ubuntu 12.04 | flashplugin-nonfree | 11.2.202.621ubuntu0.12.04.1 |
| ubuntu 14.04 | adobe-flashplugin | 1:20160512.1-0ubuntu0.14.04.1 |
| ubuntu 14.04 | flashplugin-nonfree | 11.2.202.621ubuntu0.14.04.1 |
| ubuntu 15.10 | adobe-flashplugin | 1:20160512.1-0ubuntu0.15.10.1 |
| ubuntu 15.10 | flashplugin-nonfree | 11.2.202.621ubuntu0.15.10.1 |
| ubuntu 16.04 | adobe-flashplugin | 1:20160512.1-0ubuntu0.16.04.1 |
| ubuntu 16.04 | flashplugin-nonfree | 11.2.202.621ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | flashplugin-nonfree | 11.2.202.621ubuntu0.16.04.1 |
Referanslar
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00046.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00047.html
- http://rhn.redhat.com/errata/RHSA-2016-1079.html
- http://www.securityfocus.com/bid/90505
- http://www.securitytracker.com/id/1035826
- https://access.redhat.com/security/cve/CVE-2016-4117
17 referansın hepsi
- https://github.com/cisagov/vulnrichment/issues/196
- https://helpx.adobe.com/security/products/flash-player/apsa16-02.html
- https://helpx.adobe.com/security/products/flash-player/apsb16-15.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-4117
- https://security.gentoo.org/glsa/201606-08
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4117
- https://www.cve.org/CVERecord?id=CVE-2016-4117
- https://www.exploit-db.com/exploits/46339/