CVE-2016-4247
published 2016-07-13CVE-2016-4247: Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows…
PriorityP428medium5.3CVSS 3.1
AVNACHPRNUIRSUCHINAN
EPSS
3.21%
86.7th percentile
Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information via unspecified vectors.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | flash_player | <= 18.0.0.360 | — |
| adobe | flash_player | <= 22.0.0.192 | — |
| adobe | flash_player | <= 11.2.202.626 | — |
| adobe | flash_player_desktop_runtime | <= 22.0.0.192 | — |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.02.6LOWAV:N/AC:H/Au:N/C:P/I:N/A:N
osv5.3MEDIUM
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f3h9-555p-x843: Race condition in Adobe Flash Player before 18
ghsa_unreviewed·2022-05-14
CVE-2016-4247 [MEDIUM] CWE-362 GHSA-f3h9-555p-x843: Race condition in Adobe Flash Player before 18
Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information via unspecified vectors.
OSV
CVE-2016-4247: Race condition in Adobe Flash Player before 18
osv·2016-07-13·CVSS 5.3
CVE-2016-4247 [MEDIUM] CVE-2016-4247: Race condition in Adobe Flash Player before 18
Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information via unspecified vectors.
Red Hat
flash-plugin: multiple code execution issues fixed in APSB16-25
vendor_redhat·2016-07-12·CVSS 5.3
CVE-2016-4247 [MEDIUM] flash-plugin: multiple code execution issues fixed in APSB16-25
flash-plugin: multiple code execution issues fixed in APSB16-25
Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information via unspecified vectors.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.htmlhttp://www.securityfocus.com/bid/91720http://www.securitytracker.com/id/1036280https://access.redhat.com/errata/RHSA-2016:1423https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093https://helpx.adobe.com/security/products/flash-player/apsb16-25.htmlhttps://security.gentoo.org/glsa/201607-03http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.htmlhttp://www.securityfocus.com/bid/91720http://www.securitytracker.com/id/1036280https://access.redhat.com/errata/RHSA-2016:1423https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093https://helpx.adobe.com/security/products/flash-player/apsb16-25.htmlhttps://security.gentoo.org/glsa/201607-03
2016-07-13
Published