Lucene search

K
kasperskyKaspersky LabKLA10917
HistoryOct 25, 2016 - 12:00 a.m.

KLA10917 Obsolete Adobe Flash Player for Windows

2016-10-2500:00:00
Kaspersky Lab
threats.kaspersky.com
33

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.113 Low

EPSS

Percentile

95.1%

Detect date:

10/25/2016

Severity:

Critical

Description:

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer & Edge. For details look at KLA10892.

Affected products:

Windows 8.1 for 32-bit systems
Windows 10 for 32-bit Systems
Windows RT 8.1
Windows Server 2012 R2
Windows 10 Version 1607 for x64-based Systems
Windows Server 2012
Windows 10 Version 1511 for x64-based Systems
Windows 8.1 for x64-based systems
Windows 10 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1511 for 32-bit Systems

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

ADV160008
CVE-2016-7855

Impacts:

ACE

Related products:

Microsoft Internet Explorer

CVE-IDS:

CVE-2016-78559.3Critical

Microsoft official advisories:

KB list:

3201860

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.113 Low

EPSS

Percentile

95.1%