Lucene search

[email protected]CVE-2016-1019

HistoryApr 07, 2016 - 10:59 a.m.

CVE-2016-1019

2016-04-0710:59:01

[email protected]

web.nvd.nist.gov

853

In Wild

adobe flash player

cve-2016-1019

remote code execution

denial of service

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.953 High

EPSS

Percentile

99.4%

JSON

Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.

Affected configurations

NVD

Node

adobeflash_player_desktop_runtimeRange≤21.0.0.197

AND

applemac_os_xMatch-

microsoftwindowsMatch-

Node

adobeflash_playerRange≤18.0.0.333esr

AND

applemac_os_xMatch-

microsoftwindowsMatch-

Node

adobeflash_playerRange≤21.0.0.197chrome

AND

applemac_os_xMatch-

googlechrome_osMatch-

linuxlinux_kernelMatch-

microsoftwindowsMatch-

Node

adobeflash_playerRange≤21.0.0.197edge

AND

microsoftwindows_10Match-

Node

adobeflash_playerRange≤21.0.0.197internet_explorer

AND

microsoftwindows_10Match-

microsoftwindows_8.1Match-

Node

adobeflash_playerRange≤11.2.202.577

AND

linuxlinux_kernelMatch-

Node

adobeair_desktop_runtimeRange≤21.0.0.176

AND

applemac_os_xMatch-

microsoftwindowsMatch-

Node

adobeair_sdkRange≤21.0.0.176

AND

appleiphone_osMatch-

applemac_os_xMatch-

googleandroidMatch-

microsoftwindowsMatch-

Node

adobeair_sdk_\&_compilerRange≤21.0.0.176

AND

appleiphone_osMatch-

applemac_os_xMatch-

googleandroidMatch-

microsoftwindowsMatch-

CPENameOperatorVersion
adobe:flash_player_desktop_runtimeadobe flash player desktop runtimele21.0.0.197

CPE	Name	Operator	Version
adobe:flash_player_desktop_runtime	adobe flash player desktop runtime	le	21.0.0.197

References

blogs.adobe.com/psirt/?p=1330

lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html

lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html

lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html

lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html

lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html

lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html

rhn.redhat.com/errata/RHSA-2016-0610.html

www.securityfocus.com/bid/85856

www.securitytracker.com/id/1035491

docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050

helpx.adobe.com/security/products/flash-player/apsa16-01.html

helpx.adobe.com/security/products/flash-player/apsb16-10.html

security.gentoo.org/glsa/201606-08

www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.953 High

EPSS

Percentile

99.4%

JSON

CVE-2016-1019

Affected configurations

References

Related