CVE-2016-4171 Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
CriticalCVSS 9.8
EPSS 20.1%
CISA KEV
added 2022-03-25 · due 2022-04-15
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-25
- Due date (FCEB)
- 2022-04-15
- Ransomware use
- Unknown
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | <= 11.2.202.621 | No fix listed |
| Adobe flash player | <= 21.0.0.242 | No fix listed |
| Adobe flash player | <= 18.0.0.352 | No fix listed |
| redhat enterprise linux desktop | = 5.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux server | = 5.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 5.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| SUSE linux enterprise desktop | = 12 | No fix listed |
| SUSE linux enterprise desktop | = 12-sp1 | No fix listed |
| SUSE linux enterprise workstation extension | = 12 | No fix listed |
| SUSE linux enterprise workstation extension | = 12-sp1 | No fix listed |
References
- SUSE-SU-2016:1613 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:1621 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:1625 mailing-list third-party-advisory vendor-advisory
- 91184 third-party-advisory vdb-entry
- 1036094 third-party-advisory vdb-entry
- RHSA-2016:1238 third-party-advisory vendor-advisory
- helpx.adobe.com vendor-advisory
- helpx.adobe.com vendor-advisory
- GLSA-201606-08 third-party-advisory vendor-advisory
- VU#748992 third-party-advisory us-government-resource
- github.com issue-tracking
- www.cisa.gov government-resource us-government-resource