by Kastro
Paper/Archive/CVE-2016-1019

CVE-2016-1019

Adobe Flash Player — Adobe Flash Player Arbitrary Code Execution Vulnerability

KEV · due 24 Marransomware useEPSS 22%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (NVD)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 97.7.977 × 2019.5Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADP7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: no · Technical impact: total

References

reffireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.htmladvisorysecurity.gentoo.org/glsa/201606-08advisorylists.opensuse.org/opensuse-security-announce/2016-04/msg00012.htmlrefhelpx.adobe.com/security/products/flash-player/apsa16-01.htmladvisorylists.opensuse.org/opensuse-security-announce/2016-04/msg00010.htmlrefsecuritytracker.com/id/1035491advisorylists.opensuse.org/opensuse-security-announce/2016-05/msg00044.htmlrefblogs.adobe.com/psirt/?p=1330advisorylists.opensuse.org/opensuse-security-announce/2016-04/msg00009.htmladvisorylists.opensuse.org/opensuse-security-announce/2016-05/msg00045.htmladvisorylists.opensuse.org/opensuse-security-announce/2016-04/msg00055.htmladvisoryrhn.redhat.com/errata/RHSA-2016-0610.htmladvisorydocs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050refhelpx.adobe.com/security/products/flash-player/apsb16-10.htmlrefsecurityfocus.com/bid/85856refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1019refgithub.com/cisagov/vulnrichment/issues/196kevcisa.gov/known-exploited-vulnerabilities-catalog