Home > Vulnerability Database > CVE-2016-4117

WhiteSource Vulnerability Database

New vulnerability? Tell us about it!

CVE-2016-4117

Good to know:

Date: May 10, 2016

Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.

Severity Score

5.6

Related Resources (5)

Url: https://helpx.adobe.com/security/products/flash-player/apsa16-02.html

Url: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html

Url: https://www.exploit-db.com/exploits/46339/

Url: https://nvd.nist.gov/vuln/detail/CVE-2016-4117

Url: http://www.securitytracker.com/id/1035826

Severity Score

5.6

Weakness Type (CWE)

Insufficient Information

NVD-CWE-noinfo

Top Fix

Upgrade Version

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	10.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Do you need more information?

Contact Us