CVE-2016-1010Adobe Flash Player and AIR Integer Overflow Vulnerability
Explotación conocida — Adobe Flash Player and AIR Integer Overflow Vulnerability
CISA confirmó el 25.05.2022 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 15.06.2022.
Acción requerida: The impacted products are end-of-life and should be disconnected if still in use. https://nvd.nist.gov/vuln/detail/CVE-2016-1010
Descripción
Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| adobe | air | ≤ 20.0.0.233 | |
| adobe | air desktop runtime | ≤ 20.0.0.260 | |
| adobe | air sdk | ≤ 20.0.0.260 | |
| adobe | air sdk & compiler | ≤ 20.0.0.260 | |
| adobe | flash player | ≤ 20.0.0.306 | |
| adobe | flash player desktop runtime | ≤ 20.2.2.306 | |
| samsung | x14j firmware | t-ms14jakucb-1102.5 |
Referencias y parches
- openSUSE-SU-2016:0734 vendor-advisoryMailing ListThird Party Advisory
- 1035251 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- openSUSE-SU-2016:0719 vendor-advisoryMailing ListThird Party Advisory
- GLSA-201603-07 vendor-advisoryThird Party Advisory
- SUSE-SU-2016:0715 vendor-advisoryMailing ListThird Party Advisory
- https://helpx.adobe.com/security/products/flash-player/apsb16-08.html PatchVendor Advisory
- 84308 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- SUSE-SU-2016:0716 vendor-advisoryMailing ListThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1010 US Government Resource
Coincidencias CPE (NVD) (10)
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*≤ 20.0.0.306cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*≤ 20.0.0.233cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*≤ 20.0.0.260cpe:2.3:o:samsung:x14j_firmware:t-ms14jakucb-1102.5:*:*:*:*:*:*:*cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*≤ 11.2.202.569cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*≤ 20.2.2.306cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*≤ 20.0.0.306cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*≤ 20.0.0.306cpe:2.3:a:adobe:air_desktop_runtime:*:*:*:*:*:*:*:*≤ 20.0.0.260cpe:2.3:a:adobe:air_sdk_\&_compiler:*:*:*:*:*:*:*:*≤ 20.0.0.260