Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable9354.PRM
HistoryJun 15, 2016 - 12:00 a.m.

Flash Player < 11.2.202.621 / 18.0.0.352 / 21.0.0.242 Multiple Vulnerabilities (APSB16-15)

2016-06-1500:00:00
Tenable
www.tenable.com
16
JSON

Versions of Adobe Flash Player prior to 11.2.202.621, 18.0.0.352, or 21.0.0.242 are outdated and thus unpatched for the following vulnerabilities :

  • Multiple type confusion errors exist that allow an attacker to execute arbitrary code. (CVE-2016-1105, CVE-2016-4117)
  • Multiple use-after-free errors exist that allow an attacker to execute arbitrary code. (CVE-2016-1097, CVE-2016-1106, CVE-2016-1107, CVE-2016-1108, CVE-2016-1109, CVE-2016-1110, CVE-2016-4108, CVE-2016-4110, CVE-2016-4121)
  • A heap buffer overflow condition exists that allows an attacker to execute arbitrary code. (CVE-2016-1101)
  • An unspecified buffer overflow exists that allows an attacker to execute arbitrary code. (CVE-2016-1103)
  • Multiple memory corruption issues exist that allow an attacker to execute arbitrary code. (CVE-2016-1096, CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1102, CVE-2016-1104, CVE-2016-4109, CVE-2016-4111, CVE-2016-4112, CVE-2016-4113, CVE-2016-4114, CVE-2016-4115, CVE-2016-4120, CVE-2016-4160, CVE-2016-4161, CVE-2016-4162, CVE-2016-4163)
  • A flaw exists when loading dynamic-link libraries. An attacker can exploit this, via a specially crafted ‘.dll’ file, to execute arbitrary code. (CVE-2016-4116)
Binary data 9354.prm
VendorProductVersionCPE
adobeflash_playercpe:/a:adobe:flash_player

References

Related

nessus 13
redhat 1
openvas 12
freebsd 1
archlinux 2
altlinux 2
mscve 1
mageia 1
kaspersky 1
redhatcve 30
prion 30
ubuntucve 30
cve 31
gentoo 1
checkpoint_advisories 15
suse 3
fireeye 3
threatpost 4
mmpc 1
cisa_kev 1
hackerone 4
zdt 9
packetstorm 1
metasploit 1
attackerkb 1
nessus
nessus
Adobe AIR <= 21.0.0.198 Multiple Vulnerabilities (APSB16-15)
2016-05-16 00:00:00
RHEL 5 / 6 : flash-plugin (RHSA-2016:1079)
2016-05-16 00:00:00
Adobe Flash Player <= 21.0.0.226 Multiple Vulnerabilities (APSB16-15)
2016-05-16 00:00:00
redhat
redhat
(RHSA-2016:1079) Critical: flash-plugin security update
2016-05-13 00:00:00
openvas
openvas
Adobe Flash Player Security Update (apsa16-02) - Mac OS X
2016-05-12 00:00:00
Adobe Flash Player Within Google Chrome Security Update (APSB16-15) - Windows
2017-03-18 00:00:00
Adobe Flash Player Within Google Chrome Security Update (APSB16-15) - Linux
2017-03-18 00:00:00
freebsd
freebsd
flash -- multiple vulnerabilities
2016-05-12 00:00:00
archlinux
archlinux
flashplugin: arbitrary code execution
2016-05-12 00:00:00
lib32-flashplugin: arbitrary code execution
2016-05-12 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt62
2016-05-13 00:00:00
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt62
2016-05-13 00:00:00
mscve
mscve
March 2016 Adobe Flash Security Update
2016-05-10 07:00:00
mageia
mageia
Updated flash-player-plugin packages fix security vulnerability
2016-05-12 23:00:19
kaspersky
kaspersky
KLA10810 Code execution vulnerabilities in Adobe Flash Player
2016-05-12 00:00:00
redhatcve
redhatcve
CVE-2016-4120
2016-05-20 07:48:22
CVE-2016-4160
2016-06-06 07:48:30
CVE-2016-4162
2016-06-06 07:48:39
prion
prion
Memory corruption
2016-06-16 14:59:00
Memory corruption
2016-06-16 14:59:00
Memory corruption
2016-06-16 14:59:00
ubuntucve
ubuntucve
CVE-2016-4162
2016-06-16 00:00:00
CVE-2016-4163
2016-06-16 00:00:00
CVE-2016-4120
2016-06-16 00:00:00
cve
cve
CVE-2016-4160
2016-06-16 14:59:00
CVE-2016-4120
2016-06-16 14:59:00
CVE-2016-4162
2016-06-16 14:59:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2016-06-18 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Buffer Overflow (APSB16-15; CVE-2016-1101; CVE-2016-1102; CVE-2016-1103; CVE-2016-1104)
2016-05-25 00:00:00
Adobe Flash Player Use After Free Code Execution (APSB16-15: CVE-2016-4121)
2016-06-13 00:00:00
Adobe Flash Out of Bounds Access Code Corruption (CVE-2016-4117)
2016-05-13 00:00:00
suse
suse
Security update for flash-player (important)
2016-05-16 18:08:08
Security update for flash-player (important)
2016-05-17 14:08:54
Security update for flash-player (important)
2016-05-17 14:09:11
fireeye
fireeye
CVE-2016-4117: Flash Zero-Day Exploited in the Wild
2016-05-14 00:00:00
CVE-2016-4117: Flash Zero-Day Exploited in the Wild
2016-05-13 20:00:00
CVE-2016-4117: Flash Zero-Day Exploited in the Wild
2016-05-13 20:00:00
threatpost
threatpost
CryptXXX Jumps From Angler to Neutrino Exploit Kit
2016-06-09 08:43:57
Adobe Patches 95 Vulnerabilities in Acrobat, Reader, Warns of Flash Zero Day
2016-05-10 13:56:58
Exploit Kits Attacking Adobe Flash Player Zero Day
2016-05-23 10:04:52
mmpc
mmpc
Twin zero-day attacks: PROMETHIUM and NEODYMIUM target individuals in Europe
2016-12-14 18:55:25
cisa_kev
cisa_kev
Adobe Flash Player Arbitrary Code Execution Vulnerability
2022-03-03 00:00:00
hackerone
hackerone
Internet Bug Bounty: Adobe Flash Player Regular Expression UAF Remote Code Execution Vulnerability
2016-05-19 21:56:20
Internet Bug Bounty: Adobe Flash Player ContentFactory class Memory Corruption Vulnerability
2016-05-13 01:10:41
Internet Bug Bounty: Adobe Flash Player Metadata class Memory Corruption Vulnerability
2016-05-13 01:12:37
zdt
zdt
Adobe Flash Player DeleteRangeTimelineOperation Type Confusion Exploit
2019-02-09 00:00:00
Adobe Flash - Heap Overflow in ATF Processing (Image Reading)
2016-05-17 00:00:00
Adobe Flash - SetNative Use-After-Free
2016-05-17 00:00:00
packetstorm
packetstorm
Adobe Flash Player DeleteRangeTimelineOperation Type Confusion
2019-02-09 00:00:00
metasploit
metasploit
Adobe Flash Player DeleteRangeTimelineOperation Type-Confusion
2018-12-21 08:54:35
attackerkb
attackerkb
CVE-2016-4117
2016-05-11 00:00:00
JSON
Related for 9354.PRM
nessus13redhat1openvas12freebsd1archlinux2altlinux2mscve1mageia1kaspersky1redhatcve30prion30ubuntucve30cve31gentoo1checkpoint_advisories15suse3fireeye3threatpost4mmpc1cisa_kev1hackerone4zdt9packetstorm1metasploit1attackerkb1