NetSight
IP …
critical9.8Known exploited

CVE-2016-4171

Adobe Flash Player Remote Code Execution Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-25. Federal due date: 2022-04-15.

The impacted product is end-of-life and should be disconnected if still in use.

Impact

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.

Affected products

VendorProductAffected versions
AdobeFlash Player
through 11.2.202.621
through 21.0.0.242
through 18.0.0.352
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0
OpensuseOpensuse
Versions 13.1, 13.2
SuseLinux Enterprise Desktop
Version 12
SuseLinux Enterprise Workstation Extension
Version 12

References