CVE-2016-4177
published 2016-07-13CVE-2016-4177: Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute…
PriorityP263high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EXPLOIT
EPSS
17.59%
96.8th percentile
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4176.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | flash_player | <= 18.0.0.360 | — |
| adobe | flash_player | <= 22.0.0.192 | — |
| adobe | flash_player | <= 11.2.202.626 | — |
| adobe | flash_player_desktop_runtime | <= 22.0.0.192 | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Vulnerable versions are Adobe Flash Player 22.0.0.192 and earlier (Windows/OSX) and before 11.2.202.632 on Linux; flag any Flash Player process running these versions. ↗
- →The exploit is delivered via web-page visit or file open; monitor web traffic and email attachments for SWF files triggering SceneAndFrameData memory corruption (stack corruption). ↗
- ·CVE-2016-4177 is a distinct stack memory corruption vulnerability from CVE-2016-4176, though both affect the same Flash Player version ranges and were patched together in APSB16-25; ensure detections differentiate between the two CVEs. ↗
- ·The fixed version thresholds differ by platform: 22.0.0.209 for Windows/OSX and 11.2.202.632 for Linux; version-based detections must account for both thresholds. ↗
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv8.8HIGH
vendor_redhat8.8HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
flash-plugin: multiple code execution issues fixed in APSB16-25
vendor_redhat·2016-07-12·CVSS 8.8
CVE-2016-4176 [HIGH] flash-plugin: multiple code execution issues fixed in APSB16-25
flash-plugin: multiple code execution issues fixed in APSB16-25
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4177.
Red Hat
flash-plugin: multiple code execution issues fixed in APSB16-25
vendor_redhat·2016-07-12·CVSS 8.8
CVE-2016-4177 [HIGH] flash-plugin: multiple code execution issues fixed in APSB16-25
flash-plugin: multiple code execution issues fixed in APSB16-25
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4176.
GHSA
GHSA-cxh4-rfq4-vxw5: Adobe Flash Player before 18
ghsa_unreviewed·2022-05-14·CVSS 8.8
CVE-2016-4177 [HIGH] CWE-119 GHSA-cxh4-rfq4-vxw5: Adobe Flash Player before 18
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4176.
GHSA
GHSA-x38q-2r3f-f9wm: Adobe Flash Player before 18
ghsa_unreviewed·2022-05-14·CVSS 8.8
CVE-2016-4176 [HIGH] CWE-119 GHSA-x38q-2r3f-f9wm: Adobe Flash Player before 18
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4177.
OSV
CVE-2016-4177: Adobe Flash Player before 18
osv·2016-07-13·CVSS 8.8
CVE-2016-4177 [HIGH] CVE-2016-4177: Adobe Flash Player before 18
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4176.
OSV
CVE-2016-4176: Adobe Flash Player before 18
osv·2016-07-13·CVSS 8.8
CVE-2016-4176 [HIGH] CVE-2016-4176: Adobe Flash Player before 18
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4177.
No detection rules found.
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.htmlhttp://www.securityfocus.com/bid/91721http://www.securitytracker.com/id/1036280https://access.redhat.com/errata/RHSA-2016:1423https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093https://helpx.adobe.com/security/products/flash-player/apsb16-25.htmlhttps://www.exploit-db.com/exploits/40104/http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.htmlhttp://www.securityfocus.com/bid/91721http://www.securitytracker.com/id/1036280https://access.redhat.com/errata/RHSA-2016:1423https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093https://helpx.adobe.com/security/products/flash-player/apsb16-25.htmlhttps://www.exploit-db.com/exploits/40104/
2016-07-13
Published