CVE-2016-4138

🗓️ 16 Jun 2016 14:00:00Reported by adobeType

cve

cve🔗 web.nvd.nist.gov👁 107 Views🌐 WEB

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlie

Reporter	Title	Published	Views	Family All 61
FreeBSD	flash -- multiple vulnerabilities	16 Jun 201600:00	–	freebsd
0day.today	Adobe Flash - ATF Image Packing Overflow	11 Jul 201600:00	–	zdt
ALT Linux	Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt63	27 Jun 201600:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt63	27 Jun 201600:00	–	altlinux
Tenable Nessus	Flash Player < 11.2.202.626 / 18.0.0.360 / 22.0.0.192 Multiple Vulnerabilities	12 Jun 201600:00	–	nessus
Tenable Nessus	Adobe Flash Player <= 21.0.0.242 Multiple Vulnerabilities (APSB16-18)	17 Jun 201600:00	–	nessus
Tenable Nessus	FreeBSD : flash -- multiple vulnerabilities (0e3dfdde-35c4-11e6-8e82-002590263bf5)	20 Jun 201600:00	–	nessus
Tenable Nessus	Adobe Flash Player for Mac <= 21.0.0.242 Multiple Vulnerabilities (APSB16-18)	17 Jun 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : flash-player (openSUSE-2016-740)	20 Jun 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : flash-player (openSUSE-2016-743)	20 Jun 201600:00	–	nessus

NVD

Node

redhat enterprise_linux_desktopMatch5.0

OR

redhat enterprise_linux_desktopMatch6.0

OR

redhat enterprise_linux_serverMatch5.0

OR

redhat enterprise_linux_serverMatch6.0

OR

redhat enterprise_linux_workstationMatch5.0

OR

redhat enterprise_linux_workstationMatch6.0

Node

adobe flash_playerRange≤21.0.0.242chrome

OR

adobe flash_player_desktop_runtimeRange≤21.0.0.242

AND

apple macosMatch-

OR

google chrome_osMatch-

OR

linux linux_kernelMatch-

OR

microsoft windowsMatch-

Node

microsoft windows_10Match-

OR

microsoft windows_8.1Match-

AND

adobe flash_playerRange≤21.0.0.242edge

OR

adobe flash_playerRange≤21.0.0.242internet_explorer_11

Node

adobe flash_playerRange≤11.2.202.621

AND

linux linux_kernelMatch-

Node

adobe flash_playerRange≤18.0.0.352esr

AND

apple macosMatch-

OR

microsoft windowsMatch-

Node

opensuse opensuseMatch13.1

OR

opensuse opensuseMatch13.2

OR

suse linux_enterprise_desktopMatch12-

OR

suse linux_enterprise_desktopMatch12sp1

OR

suse linux_enterprise_workstation_extensionMatch12-

OR

suse linux_enterprise_workstation_extensionMatch12sp1

Node

adobe flash_playerMatch-

AND

microsoft windows_10Match-

OR

microsoft windows_10Match1511

OR

microsoft windows_8.1Match-

OR

microsoft windows_rt_8.1Match-

OR

microsoft windows_server_2012Match-

OR

microsoft windows_server_2012Match-r2

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html
helpx	www.helpx.adobe.com/security/products/flash-player/apsb16-18.html
exploit-db	www.exploit-db.com/exploits/40090/
lists	www.lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html
access	www.access.redhat.com/errata/RHSA-2016:1238
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-083
lists	www.lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html
securitytracker	www.securitytracker.com/id/1036117

Parameter	Position	Path	Description	CWE
img	query param	LoadImage.swf?img=129	Heap overflow vulnerability in ATF image packing used by Flash Player (CVE-2016-4138); PoC involves loading attach file '129' via LoadImage.swf?img=129.

17 Jun 2026 00:46Current

9.1High risk

Vulners AI Score9.1

CVSS 3.19.8

CVSS 210

EPSS0.25419

adobe flash vulnerability cve-2016-4138 microsoft internet explorer microsoft edge nvd