CVE-2016-4114

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.

CVSS v3.0 7.5 HIGH
CVSS v2.0 7.6 HIGH

7.5^/10

CVSS v3.0 : HIGH

Vector : AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability : 1.6 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.6^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability : 4.9 / Impact : 10.0

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/90618
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html
http://www.securitytracker.com/id/1035827
https://helpx.adobe.com/security/products/flash-player/apsb16-15.html
http://rhn.redhat.com/errata/RHSA-2016-1079.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-064

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:internet_explorer:10:::::::*
	cpe:2.3:a:microsoft:internet_explorer:11:-::::::
	cpe:2.3:a:microsoft:edge:-:::::::*

Configuration 2 (hide)

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Information

Published : 2016-05-11 04:01

Updated : 2018-10-12 15:12

NVD link : CVE-2016-4114

Mitre link : CVE-2016-4114

JSON object : View

CWE

NVD-CWE-noinfo

Advertisement

Products Affected

microsoft

edge
internet_explorer

adobe

flash_player

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/90618", "name": "90618", "tags": [], "refsource": "BID"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html", "name": "SUSE-SU-2016:1305", "tags": [], "refsource": "SUSE"}, {"url": "http://www.securitytracker.com/id/1035827", "name": "1035827", "tags": [], "refsource": "SECTRACK"}, {"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-15.html", "name": "https://helpx.adobe.com/security/products/flash-player/apsb16-15.html", "tags": [], "refsource": "CONFIRM"}, {"url": "http://rhn.redhat.com/errata/RHSA-2016-1079.html", "name": "RHSA-2016:1079", "tags": [], "refsource": "REDHAT"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-064", "name": "MS16-064", "tags": [], "refsource": "MS"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2016-4114", "ASSIGNER": "psirt@adobe.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.6, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "HIGH", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.6}}, "publishedDate": "2016-05-11T11:01Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "21.0.0.213"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-12T22:12Z"}