Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10810
HistoryMay 12, 2016 - 12:00 a.m.

KLA10810 Code execution vulnerabilities in Adobe Flash Player

2016-05-1200:00:00
Kaspersky Lab
threats.kaspersky.com
83

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.94 High

EPSS

Percentile

99.1%

JSON

Detect date:

05/12/2016

Severity:

Critical

Description:

Type confusion, use-after-free, buffer overflow, memory corruption and unsafe search path vulnerabilities were found in Adobe Flash Player. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely.

Affected products:

Adobe Flash Player versions earlier than 21.0.0.242
Adobe Flash Player Extended Support Release versions earlier than 18.0.0.532
Adobe Flash Player for Linux versions earlier than 11.2.202.621
Adobe AIR versions earlier than 21.0.0.215

Solution:

Update to the latest version
Adobe Flash Player download page
Adobe AIR download page

Original advisories:

Adobe security bulletin

Impacts:

ACE

Related products:

Adobe Flash Player ActiveX

CVE-IDS:

CVE-2016-11107.6Critical
CVE-2016-41167.6Critical
CVE-2016-41137.6Critical
CVE-2016-41127.6Critical
CVE-2016-41157.6Critical
CVE-2016-41147.6Critical
CVE-2016-11037.6Critical
CVE-2016-11027.6Critical
CVE-2016-11017.6Critical
CVE-2016-11007.6Critical
CVE-2016-11077.6Critical
CVE-2016-11067.6Critical
CVE-2016-11057.6Critical
CVE-2016-11047.6Critical
CVE-2016-11097.6Critical
CVE-2016-11087.6Critical
CVE-2016-41107.6Critical
CVE-2016-41117.6Critical
CVE-2016-41087.6Critical
CVE-2016-41097.6Critical
CVE-2016-10967.6Critical
CVE-2016-10977.6Critical
CVE-2016-10987.6Critical
CVE-2016-10997.6Critical

Exploitation:

Public exploits exist for this vulnerability.

References

Related

openvas 11
archlinux 2
mscve 1
altlinux 2
mageia 1
nessus 12
redhat 1
freebsd 1
redhatcve 30
ubuntucve 29
prion 30
cvelist 30
checkpoint_advisories 13
suse 1
cve 24
zdt 8
hackerone 3
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0173)
2022-01-28 00:00:00
Adobe Air Security Update (APSB16-15) - Windows
2016-05-13 00:00:00
Adobe Air Security Update (APSB16-15) - Mac OS X
2016-05-13 00:00:00
archlinux
archlinux
lib32-flashplugin: arbitrary code execution
2016-05-12 00:00:00
flashplugin: arbitrary code execution
2016-05-12 00:00:00
mscve
mscve
March 2016 Adobe Flash Security Update
2016-05-10 07:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt62
2016-05-13 00:00:00
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt62
2016-05-13 00:00:00
mageia
mageia
Updated flash-player-plugin packages fix security vulnerability
2016-05-12 23:00:19
nessus
nessus
Adobe Flash Player <= 21.0.0.226 Multiple Vulnerabilities (APSB16-15)
2016-05-16 00:00:00
RHEL 5 / 6 : flash-plugin (RHSA-2016:1079)
2016-05-16 00:00:00
Adobe AIR <= 21.0.0.198 Multiple Vulnerabilities (APSB16-15)
2016-05-16 00:00:00
redhat
redhat
(RHSA-2016:1079) Critical: flash-plugin security update
2016-05-13 00:00:00
freebsd
freebsd
flash -- multiple vulnerabilities
2016-05-12 00:00:00
redhatcve
redhatcve
CVE-2016-4121
2016-05-20 07:48:17
CVE-2016-4120
2016-05-20 07:48:22
CVE-2016-4160
2016-06-06 07:48:30
ubuntucve
ubuntucve
CVE-2016-4121
2016-06-16 00:00:00
CVE-2016-4161
2016-06-16 00:00:00
CVE-2016-4120
2016-06-16 00:00:00
prion
prion
Design/Logic Flaw
2016-06-16 14:59:00
Memory corruption
2016-06-16 14:59:00
Memory corruption
2016-06-16 14:59:00
cvelist
cvelist
CVE-2016-4121
2016-06-16 14:00:00
CVE-2016-4163
2016-06-16 14:00:00
CVE-2016-4160
2016-06-16 14:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Buffer Overflow (APSB16-15; CVE-2016-1101; CVE-2016-1102; CVE-2016-1103; CVE-2016-1104)
2016-05-25 00:00:00
Adobe Flash Player Use After Free Code Execution (APSB16-15: CVE-2016-1110)
2016-05-24 00:00:00
Adobe Flash Player Use After Free Code Execution (APSB16-15: CVE-2016-1107)
2016-05-24 00:00:00
suse
suse
Security update for flash-player (important)
2016-05-16 18:08:08
cve
cve
CVE-2016-1110
2016-05-11 11:00:22
CVE-2016-4114
2016-05-11 11:01:09
CVE-2016-1101
2016-05-11 11:00:12
zdt
zdt
Adobe Flash - Heap Overflow in ATF Processing (Image Reading)
2016-05-17 00:00:00
Adobe Flash - SetNative Use-After-Free
2016-05-17 00:00:00
Adobe Flash - Overflow in Processing Raw 565 Textures
2016-05-17 00:00:00
hackerone
hackerone
Internet Bug Bounty: Adobe Flash Player ContentFactory class Memory Corruption Vulnerability
2016-05-13 01:10:41
Internet Bug Bounty: Adobe Flash Player Metadata class Memory Corruption Vulnerability
2016-05-13 01:12:37
Internet Bug Bounty: Adobe Flash Player OpportunityGenerator class Memory Corruption Vulnerability
2016-05-13 01:14:16

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.94 High

EPSS

Percentile

99.1%

JSON
Related for KLA10810
openvas11archlinux2mscve1altlinux2mageia1nessus12redhat1freebsd1redhatcve30ubuntucve29prion30cvelist30checkpoint_advisories13suse1cve24zdt8hackerone3