Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2016-1101 — Adobe Flash Player vulnerability

7 documents7 sources
Severity
7.5HIGHNVD
EPSS
53.1%
top 2.03%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Adobe Flash PlayerMicrosoft Internet Explorer
Timeline
PublishedMay 11
Latest updateMay 14

Description

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages2 packages

▶NVDadobe/flash_player21.0.0.213

🔴Vulnerability Details

2
GHSA
GHSA-39xv-w3xg-f7h5: Unspecified vulnerability in Adobe Flash Player 21↗2022-05-14
▶
CVEList
CVE-2016-1101: Unspecified vulnerability in Adobe Flash Player 21↗2016-05-11
▶

💥Exploits & PoCs

1
Exploit-DB
Adobe Flash - Heap Overflow in ATF Processing Image Reading↗2016-05-17
▶

📋Vendor Advisories

1
Red Hat
flash-plugin: multiple code execution issues fixed in APSB16-15↗2016-05-10
▶

🕵️Threat Intelligence

1
Zscaler
Zscaler found Multiple Security Vulnerabilities | 05-13-2016↗
▶

💬Community

1
Bugzilla
flash-plugin: multiple code execution issues fixed in APSB16-15↗2016-05-11
▶
CVE-2016-1101 — Adobe Flash Player vulnerability | cvebase