CVE-2016-4138

published 2016-06-16

CVE-2016-4138: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and…

Priority P2 67 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

EXPLOIT

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
adobe	flash_player	<= 21.0.0.242	—
adobe	flash_player	<= 11.2.202.621	—
adobe	flash_player	<= 18.0.0.352	—
adobe	flash_player_desktop_runtime	<= 21.0.0.242	—
opensuse	opensuse	—	—
opensuse	opensuse	—	—
redhat	enterprise_linux_desktop	—	—
redhat	enterprise_linux_desktop	—	—
redhat	enterprise_linux_server	—	—
redhat	enterprise_linux_server	—	—
redhat	enterprise_linux_workstation	—	—
redhat	enterprise_linux_workstation	—	—
suse	linux_enterprise_desktop	—	—
suse	linux_enterprise_workstation_extension	—	—

Detection & IOCs extracted from sources · hover to see the quote

url https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40090.zip↗

• → Heap overflow triggered via ATF image packing when loading a crafted image file through LoadImage.swf with a malicious 'img' parameter (e.g., img=129) ↗
• → Monitor for Flash Player loading ATF-format images via LoadImage.swf with suspicious or unexpected numeric 'img' query parameters ↗

• · The vulnerability is described as 'unspecified' with unknown impact and attack vectors beyond the ATF heap overflow PoC; full exploitation details are not publicly documented ↗
• · Affects Adobe Flash Player 21.0.0.242 and earlier, including Flash libraries embedded in Microsoft Internet Explorer 10/11 and Microsoft Edge ↗

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

vendor_redhat 9.8 CRITICAL

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.