CVE-2016-4135

published 2016-06-16

CVE-2016-4135: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…

Priority P2 63 high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

EXPLOIT

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
adobe	flash_player	<= 21.0.0.242	—
adobe	flash_player	<= 11.2.202.621	—
adobe	flash_player	<= 18.0.0.352	—
adobe	flash_player_desktop_runtime	<= 21.0.0.242	—
opensuse	opensuse	—	—
opensuse	opensuse	—	—
redhat	enterprise_linux_desktop	—	—
redhat	enterprise_linux_desktop	—	—
redhat	enterprise_linux_server	—	—
redhat	enterprise_linux_server	—	—
redhat	enterprise_linux_workstation	—	—
redhat	enterprise_linux_workstation	—	—
suse	linux_enterprise_desktop	—	—
suse	linux_enterprise_workstation_extension	—	—

Detection & IOCs extracted from sources · hover to see the quote

url https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40087.zip↗

filename LoadImage.swf↗

• → Look for SWF files loading ATF-format textures (e.g., LoadImage.swf) with a crafted PNG where the image height is 1 pixel, which triggers a heap overflow in ATF alpha decompression. ↗
• → Monitor HTTP requests for SWF files accepting an 'img' query parameter pointing to a remote PNG, consistent with the PoC delivery mechanism. ↗
• → The vulnerability is triggered via ATF (Adobe Texture Format) processing inside Flash Player; inspect ATF file parsing for heap overflow conditions. ↗

• · Affected version is Adobe Flash Player 21.0.0.242 and earlier; scope includes Flash libraries embedded in Microsoft Internet Explorer 10/11 and Microsoft Edge. ↗
• · This CVE is one of multiple code execution issues fixed in Adobe bulletin APSB16-18 / Microsoft bulletin MS16-083; ensure all sibling CVEs are also addressed. ↗

CVSS provenance

nvd v3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvd v2.0 9.3 CRITICAL AV:N/AC:M/Au:N/C:C/I:C/A:C

vendor_redhat 8.8 HIGH

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.