CVE-2016-1010Adobe Flash Player and AIR Integer Overflow Vulnerability
Known exploited — Adobe Flash Player and AIR Integer Overflow Vulnerability
CISA confirmed this vulnerability is used in real attacks on 25.05.2022. Remediation deadline for US federal agencies: 15.06.2022.
Required action: The impacted products are end-of-life and should be disconnected if still in use. https://nvd.nist.gov/vuln/detail/CVE-2016-1010
Description
Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| adobe | air | ≤ 20.0.0.233 | |
| adobe | air desktop runtime | ≤ 20.0.0.260 | |
| adobe | air sdk | ≤ 20.0.0.260 | |
| adobe | air sdk & compiler | ≤ 20.0.0.260 | |
| adobe | flash player | ≤ 20.0.0.306 | |
| adobe | flash player desktop runtime | ≤ 20.2.2.306 | |
| samsung | x14j firmware | t-ms14jakucb-1102.5 |
References and patches
- openSUSE-SU-2016:0734 vendor-advisoryMailing ListThird Party Advisory
- 1035251 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- openSUSE-SU-2016:0719 vendor-advisoryMailing ListThird Party Advisory
- GLSA-201603-07 vendor-advisoryThird Party Advisory
- SUSE-SU-2016:0715 vendor-advisoryMailing ListThird Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb16-08.html PatchVendor Advisory
- 84308 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- SUSE-SU-2016:0716 vendor-advisoryMailing ListThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1010 US Government Resource
CPE matches (NVD) (10)
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*≤ 20.0.0.306cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*≤ 20.0.0.233cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*≤ 20.0.0.260cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:*:*:*:*:*:*:*cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*≤ 11.2.202.569cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*≤ 20.2.2.306cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*≤ 20.0.0.306cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*≤ 20.0.0.306cpe:2.3:a:adobe:air_desktop_runtime:*:*:*:*:*:*:*:*≤ 20.0.0.260cpe:2.3:a:adobe:air_sdk_\&_compiler:*:*:*:*:*:*:*:*≤ 20.0.0.260