Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10810
HistoryMay 12, 2016 - 12:00 a.m.

KLA10810 Code execution vulnerabilities in Adobe Flash Player

2016-05-1200:00:00
Kaspersky Lab
threats.kaspersky.com
84

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON

Type confusion, use-after-free, buffer overflow, memory corruption and unsafe search path vulnerabilities were found in Adobe Flash Player. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely.

Technical details

To update Adobe Flash Player ActiveX (detected as Flash.ocx) on Windows 8 and higher, install latest updates from Control Panel

Original advisories

Adobe security bulletin

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Adobe-Flash-Player-ActiveX

Adobe-Flash-Player-NPAPI

Adobe-Flash-Player-PPAPI

CVE list

CVE-2016-1110 critical

CVE-2016-4116 critical

CVE-2016-4113 critical

CVE-2016-4112 critical

CVE-2016-4115 critical

CVE-2016-4114 critical

CVE-2016-1103 critical

CVE-2016-1102 critical

CVE-2016-1101 critical

CVE-2016-1100 critical

CVE-2016-1107 critical

CVE-2016-1106 critical

CVE-2016-1105 critical

CVE-2016-1104 critical

CVE-2016-1109 critical

CVE-2016-1108 critical

CVE-2016-4110 critical

CVE-2016-4111 critical

CVE-2016-4117 critical

CVE-2016-4108 critical

CVE-2016-4109 critical

CVE-2016-1096 critical

CVE-2016-1097 critical

CVE-2016-1098 critical

CVE-2016-1099 critical

Solution

Update to the latest versionAdobe AIR download page

Adobe Flash Player download page

Impacts

  • ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

  • SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

  • Adobe Flash Player versions earlier than 21.0.0.242Adobe Flash Player Extended Support Release versions earlier than 18.0.0.532Adobe Flash Player for Linux versions earlier than 11.2.202.621Adobe AIR versions earlier than 21.0.0.215

Related

openvas 12
altlinux 2
mageia 1
archlinux 2
mscve 1
redhat 1
nessus 13
freebsd 1
redhatcve 23
ubuntucve 23
cvelist 23
prion 23
cve 22
nvd 22
checkpoint_advisories 7
suse 3
fireeye 3
threatpost 4
cisa_kev 1
mmpc 1
packetstorm 1
metasploit 1
zdt 8
attackerkb 1
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0173)
2022-01-28 00:00:00
Adobe Air Security Update (APSB16-15) - Windows
2016-05-13 00:00:00
Adobe Air Security Update (APSB16-15) - Mac OS X
2016-05-13 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt62
2016-05-13 00:00:00
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt62
2016-05-13 00:00:00
mageia
mageia
Updated flash-player-plugin packages fix security vulnerability
2016-05-12 23:00:19
archlinux
archlinux
flashplugin: arbitrary code execution
2016-05-12 00:00:00
lib32-flashplugin: arbitrary code execution
2016-05-12 00:00:00
mscve
mscve
March 2016 Adobe Flash Security Update
2016-05-10 07:00:00
redhat
redhat
(RHSA-2016:1079) Critical: flash-plugin security update
2016-05-13 00:00:00
nessus
nessus
Adobe Flash Player <= 21.0.0.226 Multiple Vulnerabilities (APSB16-15)
2016-05-16 00:00:00
RHEL 5 / 6 : flash-plugin (RHSA-2016:1079)
2016-05-16 00:00:00
Adobe AIR <= 21.0.0.198 Multiple Vulnerabilities (APSB16-15)
2016-05-16 00:00:00
freebsd
freebsd
flash -- multiple vulnerabilities
2016-05-12 00:00:00
redhatcve
redhatcve
CVE-2016-4121
2016-05-20 07:48:17
CVE-2016-4162
2016-06-06 07:48:39
CVE-2016-4160
2016-06-06 07:48:30
ubuntucve
ubuntucve
CVE-2016-4121
2016-06-16 00:00:00
CVE-2016-4161
2016-06-16 00:00:00
CVE-2016-4120
2016-06-16 00:00:00
cvelist
cvelist
CVE-2016-4121
2016-06-16 14:00:00
CVE-2016-4160
2016-06-16 14:00:00
CVE-2016-4162
2016-06-16 14:00:00
prion
prion
Design/Logic Flaw
2016-06-16 14:59:00
Memory corruption
2016-06-16 14:59:00
Memory corruption
2016-06-16 14:59:00
cve
cve
CVE-2016-4121
2016-06-16 14:59:01
CVE-2016-4120
2016-06-16 14:59:00
CVE-2016-4160
2016-06-16 14:59:43
nvd
nvd
CVE-2016-4121
2016-06-16 14:59:01
CVE-2016-4163
2016-06-16 14:59:46
CVE-2016-4161
2016-06-16 14:59:43
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Buffer Overflow (APSB16-15; CVE-2016-1101; CVE-2016-1102; CVE-2016-1103; CVE-2016-1104)
2016-05-25 00:00:00
Adobe Flash Out of Bounds Access Code Corruption (CVE-2016-4117)
2016-05-13 00:00:00
Adobe Flash Player Use After Free Code Execution (APSB16-15: CVE-2016-1110)
2016-05-24 00:00:00
suse
suse
Security update for flash-player (important)
2016-05-16 18:08:08
Security update for flash-player (important)
2016-05-17 14:08:54
Security update for flash-player (important)
2016-05-17 14:09:11
fireeye
fireeye
CVE-2016-4117: Flash Zero-Day Exploited in the Wild
2016-05-13 20:00:00
CVE-2016-4117: Flash Zero-Day Exploited in the Wild
2016-05-13 20:00:00
CVE-2016-4117: Flash Zero-Day Exploited in the Wild
2016-05-14 00:00:00
threatpost
threatpost
CryptXXX Jumps From Angler to Neutrino Exploit Kit
2016-06-09 08:43:57
Adobe Patches 95 Vulnerabilities in Acrobat, Reader, Warns of Flash Zero Day
2016-05-10 13:56:58
Exploit Kits Attacking Adobe Flash Player Zero Day
2016-05-23 10:04:52
cisa_kev
cisa_kev
Adobe Flash Player Arbitrary Code Execution Vulnerability
2022-03-03 00:00:00
mmpc
mmpc
Twin zero-day attacks: PROMETHIUM and NEODYMIUM target individuals in Europe
2016-12-14 18:55:25
packetstorm
packetstorm
Adobe Flash Player DeleteRangeTimelineOperation Type Confusion
2019-02-09 00:00:00
metasploit
metasploit
Adobe Flash Player DeleteRangeTimelineOperation Type-Confusion
2018-12-21 08:54:35
zdt
zdt
Adobe Flash Player DeleteRangeTimelineOperation Type Confusion Exploit
2019-02-09 00:00:00
Adobe Flash - Overflow in Processing Raw 565 Textures
2016-05-17 00:00:00
Adobe Flash - Heap Overflow in ATF Processing (Image Reading)
2016-05-17 00:00:00
attackerkb
attackerkb
CVE-2016-4117
2016-05-11 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON
Related for KLA10810
openvas12altlinux2mageia1archlinux2mscve1redhat1nessus13freebsd1redhatcve23ubuntucve23cvelist23prion23cve22nvd22checkpoint_advisories7suse3fireeye3threatpost4cisa_kev1mmpc1packetstorm1metasploit1zdt8attackerkb1