CVE-2016-4247 — Race Condition in Adobe Flash Player

CWE-362 — Race Condition6 documents6 sources
Severity
5.3MEDIUMNVD
EPSS
0.8%
top 25.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe Flash PlayerAdobe Flash Player Desktop Runtime
Timeline
PublishedJul 13
Latest updateMay 14

Description

Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information via unspecified vectors.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.6 | Impact: 3.6

Affected Packages2 packages

▶NVDadobe/flash_player18.0.0.360+2

Patches

Patch: docs.microsoft.com ↗Patch: helpx.adobe.com ↗Patch: docs.microsoft.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-f3h9-555p-x843: Race condition in Adobe Flash Player before 18↗2022-05-14
▶
CVEList
CVE-2016-4247: Race condition in Adobe Flash Player before 18↗2016-07-13
▶
OSV
CVE-2016-4247: Race condition in Adobe Flash Player before 18↗2016-07-13
▶

📋Vendor Advisories

1
Red Hat
flash-plugin: multiple code execution issues fixed in APSB16-25↗2016-07-12
▶

💬Community

1
Bugzilla
flash-plugin: multiple code execution issues fixed in APSB16-25↗2016-07-13
▶
CVE-2016-4247 — Race Condition in Adobe Flash Player | cvebase