CVE-2016-1010Adobe Flash Player and AIR Integer Overflow Vulnerability
Bekannt ausgenutzt — Adobe Flash Player and AIR Integer Overflow Vulnerability
CISA hat am 25.05.2022 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 15.06.2022.
Erforderliche Maßnahme: The impacted products are end-of-life and should be disconnected if still in use. https://nvd.nist.gov/vuln/detail/CVE-2016-1010
Beschreibung
Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| adobe | air | ≤ 20.0.0.233 | |
| adobe | air desktop runtime | ≤ 20.0.0.260 | |
| adobe | air sdk | ≤ 20.0.0.260 | |
| adobe | air sdk & compiler | ≤ 20.0.0.260 | |
| adobe | flash player | ≤ 20.0.0.306 | |
| adobe | flash player desktop runtime | ≤ 20.2.2.306 | |
| samsung | x14j firmware | t-ms14jakucb-1102.5 |
Referenzen und Patches
- openSUSE-SU-2016:0734 vendor-advisoryMailing ListThird Party Advisory
- 1035251 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- openSUSE-SU-2016:0719 vendor-advisoryMailing ListThird Party Advisory
- GLSA-201603-07 vendor-advisoryThird Party Advisory
- SUSE-SU-2016:0715 vendor-advisoryMailing ListThird Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb16-08.html PatchVendor Advisory
- 84308 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- SUSE-SU-2016:0716 vendor-advisoryMailing ListThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1010 US Government Resource
CPE-Treffer (NVD) (10)
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*≤ 20.0.0.306cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*≤ 20.0.0.233cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*≤ 20.0.0.260cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:*:*:*:*:*:*:*cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*≤ 11.2.202.569cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*≤ 20.2.2.306cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*≤ 20.0.0.306cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*≤ 20.0.0.306cpe:2.3:a:adobe:air_desktop_runtime:*:*:*:*:*:*:*:*≤ 20.0.0.260cpe:2.3:a:adobe:air_sdk_\&_compiler:*:*:*:*:*:*:*:*≤ 20.0.0.260