Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2016-4171

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.

VectorNETWORK

PublishedJun 16, 2016, 14:59

Published Bypsirt@adobe.com

Base Score

Score9.8

Affected Versions

No affected versions found.

References

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html
http://www.securityfocus.com/bid/91184
http://www.securitytracker.com/id/1036094
https://access.redhat.com/errata/RHSA-2016:1238
https://helpx.adobe.com/security/products/flash-player/apsa16-03.html
https://helpx.adobe.com/security/products/flash-player/apsb16-18.html
https://security.gentoo.org/glsa/201606-08
https://www.kb.cert.org/vuls/id/748992
https://github.com/cisagov/vulnrichment/issues/196
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4171

Weakness Type

NVD-CWE-noinfo

CVSS Metrics

Base Score

9.8

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base SeverityCritical

Version

3.1

Attack Vector (AV)

NETWORK