CVE-2016-4178
published 2016-07-13CVE-2016-4178: Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass…
PriorityP423medium4.3CVSS 3.1
AVNACLPRNUIRSUCLINAN
EPSS
3.19%
86.6th percentile
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | flash_player | <= 18.0.0.360 | — |
| adobe | flash_player | <= 22.0.0.192 | — |
| adobe | flash_player | <= 11.2.202.626 | — |
| adobe | flash_player_desktop_runtime | <= 22.0.0.192 | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
osv4.3MEDIUM
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
flash-plugin: multiple code execution issues fixed in APSB16-25
vendor_redhat·2016-07-12·CVSS 4.3
CVE-2016-4178 [MEDIUM] flash-plugin: multiple code execution issues fixed in APSB16-25
flash-plugin: multiple code execution issues fixed in APSB16-25
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.
GHSA
GHSA-32fr-79cm-96p3: Adobe Flash Player before 18
ghsa_unreviewed·2022-05-14
CVE-2016-4178 [MEDIUM] CWE-200 GHSA-32fr-79cm-96p3: Adobe Flash Player before 18
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.
OSV
CVE-2016-4178: Adobe Flash Player before 18
osv·2016-07-13·CVSS 4.3
CVE-2016-4178 [MEDIUM] CVE-2016-4178: Adobe Flash Player before 18
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.
No detection rules found.
No public exploits indexed.
HackerOne
Flash “local-with-filesystem” Bypass in navigateToURL
hackerone·2019-10-17·CVSS 4.3
CVE-2016-4178 [MEDIUM] Flash “local-with-filesystem” Bypass in navigateToURL
Flash “local-with-filesystem” Bypass in navigateToURL
This issue has been patched by Adobe: https://helpx.adobe.com/security/products/flash-player/apsb16-25.html
(CVE-2016-4178)
Flash “local-with-filesystem” policy can be bypassed using the “navigateToURL” function.
It is not possible to target the local files using a Flash file in a website using normal methods such as the “file://” protocol or the “\\localhost\c$” path due to the Flash “local-with-filesystem” security policy.
However, a method was found that could bypass this protection. For instance the following payload could be used to open the Windows directory in the C drive:
\\.\localhost/c:\windows\
Example (should be tested in IE):
http://0me.me/demo/xss/flash/link_protocol_test.swf?input=\\.\localhost/c:\windows\
It was p
Bugzilla
flash-plugin: multiple code execution issues fixed in APSB16-25
bugzilla·2016-07-13·CVSS 8.8
CVE-2016-4247 [HIGH] flash-plugin: multiple code execution issues fixed in APSB16-25
flash-plugin: multiple code execution issues fixed in APSB16-25
Adobe Security Bulletin APSB16-25 for Adobe Flash Player describes multiple flaws that can possibly lead to code execution when Flash Player is used to play a specially crafted SWF file.
Quoting from the APSB16-25:
These updates resolve a race condition vulnerability that could lead to information disclosure (CVE-2016-4247).
These updates resolve type confusion vulnerabilities that could lead to code execution (CVE-2016-4223, CVE-2016-4224, CVE-2016-4225).
These updates resolve use-after-free vulnerabilities that could lead to code execution (CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, CVE-2016-4248, CVE-2016-7020).
These updates r
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.htmlhttp://www.securityfocus.com/bid/91723http://www.securitytracker.com/id/1036280https://access.redhat.com/errata/RHSA-2016:1423https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093https://helpx.adobe.com/security/products/flash-player/apsb16-25.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.htmlhttp://www.securityfocus.com/bid/91723http://www.securitytracker.com/id/1036280https://access.redhat.com/errata/RHSA-2016:1423https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093https://helpx.adobe.com/security/products/flash-player/apsb16-25.html
2016-07-13
Published