CVE-2016-1014
published 2016-04-09CVE-2016-1014: Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616…
high7.3CVSS 3.1
AVLACLPRLUIRSUCHIHAH
Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows local users to gain privileges via a Trojan horse resource in an unspecified directory.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | air_desktop_runtime | <= 21.0.0.176 | — |
| adobe | air_sdk | <= 21.0.0.176 | — |
| adobe | air_sdk_compiler | <= 21.0.0.176 | — |
| adobe | flash_player | <= 11.2.202.577 | — |
| adobe | flash_player | <= 18.0.0.333 | — |
| adobe | flash_player | <= 21.0.0.197 | — |
| adobe | flash_player_desktop_runtime | <= 21.0.0.197 | — |
CVSS provenance
nvdv3.17.3HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
osv7.3HIGH