超危
Adobe Flash Player <21.0.0.197代码执行漏洞
2016-04-07 00:00:00 公开 ，2026-08-14 05:07:18 更新
- 关键漏洞
- CISA KEV
- 勒索软件漏洞
- APT漏洞
- 远程
- 无需认证
- 开源组件漏洞
- 公开PoC
- SSVC：
- 可利用状态：已被积极利用攻击自动化：是技术影响评估：全部 2022-03-02 08:00:00
风险信息
- CVSS v2 向量
- AV:N/AC:L/Au:N/C:C/I:C/A:C
- CVSS v2 风险值
- 10
- CVSS v3 向量
- AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3 风险值
- 9.8
- CVSS v3.1 向量
- AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3.1 风险值
- 9.8
详细信息
- 漏洞类型
- 其他
- 漏洞描述
- Adobe Flash Player 21.0.0.197及更早版本允许远程攻击者导致拒绝服务（应用程序崩溃）或可能通过未指定的向量执行任意代码，2016年4月在野外利用。
- 修复建议
- 有关补丁、升级或建议的解决方法信息，请参阅Adobe安全公告APSB16-10： https://helpx.adobe.com/security/products/flash-player/apsa16-01.html
参考链接
- https://helpx.adobe.com/security/products/flash-player/apsa16-01.html
CVE · x_refsource_CONFIRM
- http://blogs.adobe.com/psirt/?p=1330
CVE · x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html
CVE · vendor-advisory · x_refsource_SUSE
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050
CVE · vendor-advisory · x_refsource_MS
- https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html
CVE · x_refsource_MISC
- https://security.gentoo.org/glsa/201606-08
CVE · vendor-advisory · x_refsource_GENTOO
- https://helpx.adobe.com/security/products/flash-player/apsb16-10.html
CVE · x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html
CVE · vendor-advisory · x_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html
CVE · vendor-advisory · x_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html
CVE · vendor-advisory · x_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html
CVE · vendor-advisory · x_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html
CVE · vendor-advisory · x_refsource_SUSE
- http://rhn.redhat.com/errata/RHSA-2016-0610.html
CVE · vendor-advisory · x_refsource_REDHAT
- https://ubuntu.com/security/CVE-2016-1019
OSV
- https://www.cve.org/CVERecord?id=CVE-2016-1019
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
OSV
- https://osv.dev/vulnerability/UBUNTU-CVE-2016-1019
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1019
NVD · US Government Resource
- https://github.com/cisagov/vulnrichment/issues/196
NVD · Issue Tracking