Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2016-4188 (GCVE-0-2016-4188)
Vulnerability from cvelistv5
- n/a
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T00:17:31.315Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "SUSE-SU-2016:1826",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html"
},
{
"name": "openSUSE-SU-2016:1802",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html"
},
{
"name": "91725",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/91725"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
},
{
"name": "RHSA-2016:1423",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
},
{
"name": "MS16-093",
"tags": [
"vendor-advisory",
"x_refsource_MS",
"x_transferred"
],
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093"
},
{
"name": "1036280",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1036280"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-07-12T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-12T19:57:01",
"orgId": "078d4453-3bcd-4900-85e6-15281da43538",
"shortName": "adobe"
},
"references": [
{
"name": "SUSE-SU-2016:1826",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html"
},
{
"name": "openSUSE-SU-2016:1802",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html"
},
{
"name": "91725",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/91725"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
},
{
"name": "RHSA-2016:1423",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
},
{
"name": "MS16-093",
"tags": [
"vendor-advisory",
"x_refsource_MS"
],
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093"
},
{
"name": "1036280",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1036280"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2016-4188",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "SUSE-SU-2016:1826",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html"
},
{
"name": "openSUSE-SU-2016:1802",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html"
},
{
"name": "91725",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/91725"
},
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"refsource": "CONFIRM",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
},
{
"name": "RHSA-2016:1423",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
},
{
"name": "MS16-093",
"refsource": "MS",
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093"
},
{
"name": "1036280",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1036280"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
"assignerShortName": "adobe",
"cveId": "CVE-2016-4188",
"datePublished": "2016-07-13T01:00:00",
"dateReserved": "2016-04-27T00:00:00",
"dateUpdated": "2024-08-06T00:17:31.315Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2016-4188\",\"sourceIdentifier\":\"psirt@adobe.com\",\"published\":\"2016-07-13T01:59:57.833\",\"lastModified\":\"2025-04-12T10:46:40.837\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.\"},{\"lang\":\"es\",\"value\":\"Adobe Flash Player en versiones anteriores a 18.0.0.366 y 19.x hasta la versi\u00f3n 22.x en versiones anteriores a 22.0.0.209 en Windows y OS X y en versiones anteriores a 11.2.202.632 en Linux permite a atacantes ejecutar c\u00f3digo arbitrario o provocar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) a trav\u00e9s de vectores no especificados, una vulnerabilidad diferente a CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245 y CVE-2016-4246.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:C/I:C/A:C\",\"baseScore\":9.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"22.0.0.192\",\"matchCriteriaId\":\"2882AD1A-923D-436F-9695-5132A63A6E9E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*\",\"versionEndIncluding\":\"18.0.0.360\",\"matchCriteriaId\":\"5E1CBE9D-0D76-4373-9C8E-1D96F7FBDFA5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*\",\"versionEndIncluding\":\"22.0.0.192\",\"matchCriteriaId\":\"1B17EE56-CEA0-4752-A11C-C7935EE1B21A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*\",\"versionEndIncluding\":\"22.0.0.192\",\"matchCriteriaId\":\"BC528B44-152E-462E-AEDD-361CEDADF230\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*\",\"versionEndIncluding\":\"22.0.0.192\",\"matchCriteriaId\":\"E586D377-2A01-4058-8639-3AF4B9B12800\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21540673-614A-4D40-8BD7-3F07723803B0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"11.2.202.626\",\"matchCriteriaId\":\"201C6239-BC3D-4DA6-B599-579D94347909\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/91725\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1036280\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2016:1423\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb16-25.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/91725\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1036280\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2016:1423\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb16-25.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}"
}
}
fkie_cve-2016-4188
Vulnerability from fkie_nvd
| URL | Tags | ||
|---|---|---|---|
| psirt@adobe.com | http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html | Broken Link, Third Party Advisory | |
| psirt@adobe.com | http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html | Broken Link, Third Party Advisory | |
| psirt@adobe.com | http://www.securityfocus.com/bid/91725 | Broken Link, Third Party Advisory, VDB Entry | |
| psirt@adobe.com | http://www.securitytracker.com/id/1036280 | Broken Link, Third Party Advisory, VDB Entry | |
| psirt@adobe.com | https://access.redhat.com/errata/RHSA-2016:1423 | Third Party Advisory | |
| psirt@adobe.com | https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093 | Patch, Vendor Advisory | |
| psirt@adobe.com | https://helpx.adobe.com/security/products/flash-player/apsb16-25.html | Patch, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html | Broken Link, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html | Broken Link, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/91725 | Broken Link, Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securitytracker.com/id/1036280 | Broken Link, Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2016:1423 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093 | Patch, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://helpx.adobe.com/security/products/flash-player/apsb16-25.html | Patch, Vendor Advisory |
| Vendor | Product | Version | |
|---|---|---|---|
| adobe | flash_player_desktop_runtime | * | |
| apple | mac_os_x | - | |
| microsoft | windows | - | |
| adobe | flash_player | * | |
| apple | mac_os_x | - | |
| microsoft | windows | - | |
| adobe | flash_player | * | |
| apple | mac_os_x | - | |
| chrome_os | - | ||
| linux | linux_kernel | - | |
| microsoft | windows | - | |
| adobe | flash_player | * | |
| adobe | flash_player | * | |
| microsoft | windows_10 | - | |
| microsoft | windows_8.1 | - | |
| adobe | flash_player | * | |
| linux | linux_kernel | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2882AD1A-923D-436F-9695-5132A63A6E9E",
"versionEndIncluding": "22.0.0.192",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*",
"matchCriteriaId": "5E1CBE9D-0D76-4373-9C8E-1D96F7FBDFA5",
"versionEndIncluding": "18.0.0.360",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
"matchCriteriaId": "1B17EE56-CEA0-4752-A11C-C7935EE1B21A",
"versionEndIncluding": "22.0.0.192",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
"matchCriteriaId": "BC528B44-152E-462E-AEDD-361CEDADF230",
"versionEndIncluding": "22.0.0.192",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
"matchCriteriaId": "E586D377-2A01-4058-8639-3AF4B9B12800",
"versionEndIncluding": "22.0.0.192",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"matchCriteriaId": "21540673-614A-4D40-8BD7-3F07723803B0",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"matchCriteriaId": "201C6239-BC3D-4DA6-B599-579D94347909",
"versionEndIncluding": "11.2.202.626",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246."
},
{
"lang": "es",
"value": "Adobe Flash Player en versiones anteriores a 18.0.0.366 y 19.x hasta la versi\u00f3n 22.x en versiones anteriores a 22.0.0.209 en Windows y OS X y en versiones anteriores a 11.2.202.632 en Linux permite a atacantes ejecutar c\u00f3digo arbitrario o provocar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) a trav\u00e9s de vectores no especificados, una vulnerabilidad diferente a CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245 y CVE-2016-4246."
}
],
"id": "CVE-2016-4188",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2016-07-13T01:59:57.833",
"references": [
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/91725"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1036280"
},
{
"source": "psirt@adobe.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
},
{
"source": "psirt@adobe.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093"
},
{
"source": "psirt@adobe.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/91725"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1036280"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"sourceIdentifier": "psirt@adobe.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
rhsa-2016:1423
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.\n\nThis update upgrades Flash Player to version 11.2.202.632.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2016-4172, CVE-2016-4173, CVE-2016-4174, CVE-2016-4175, CVE-2016-4176, CVE-2016-4177, CVE-2016-4178, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4222, CVE-2016-4223, CVE-2016-4224, CVE-2016-4225, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, CVE-2016-4232, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, CVE-2016-4246, CVE-2016-4247, CVE-2016-4248, CVE-2016-4249)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:1423",
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
},
{
"category": "external",
"summary": "1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1423.json"
}
],
"title": "Red Hat Security Advisory: flash-plugin security update",
"tracking": {
"current_release_date": "2025-09-26T03:48:09+00:00",
"generator": {
"date": "2025-09-26T03:48:09+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.8"
}
},
"id": "RHSA-2016:1423",
"initial_release_date": "2016-07-13T18:22:39+00:00",
"revision_history": [
{
"date": "2016-07-13T18:22:39+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-07-13T18:22:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-26T03:48:09+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.632-1.el5_11.i386",
"product": {
"name": "flash-plugin-0:11.2.202.632-1.el5_11.i386",
"product_id": "flash-plugin-0:11.2.202.632-1.el5_11.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.632-1.el5_11?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"product": {
"name": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"product_id": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.632-1.el6_8?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.632-1.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386"
},
"product_reference": "flash-plugin-0:11.2.202.632-1.el5_11.i386",
"relates_to_product_reference": "5Client-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.632-1.el5_11.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386"
},
"product_reference": "flash-plugin-0:11.2.202.632-1.el5_11.i386",
"relates_to_product_reference": "5Server-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.632-1.el6_8.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
},
"product_reference": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"relates_to_product_reference": "6Client-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.632-1.el6_8.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
},
"product_reference": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"relates_to_product_reference": "6Server-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.632-1.el6_8.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
},
"product_reference": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.8.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-4172",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4172"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4172",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4172"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4172",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4172"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4173",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4173"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4173",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4173"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4173",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4173"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4174",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4174"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4174",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4174"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4174",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4174"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4175",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4175"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4175",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4175"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4176",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4177.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4176"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4176",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4176"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4176",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4176"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4177",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4176.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4177"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4177",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4177"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4177",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4177"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4178",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4178"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4178",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4178"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4179",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4179"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4179",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4179"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4179",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4179"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4180",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4180"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4180",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4180"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4180",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4180"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4181",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4181"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4181",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4181"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4182",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4182"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4182",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4182"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4182",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4182"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4183",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4183"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4183",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4183"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4184",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4184"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4184",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4184"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4184",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4184"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4185",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4185"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4185",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4185"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4185",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4185"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4186",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4186"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4186",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4186"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4187",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4187"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4187",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4187"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4187",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4187"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4188",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4188"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4188",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4188"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4188",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4188"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4189",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4189"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4189",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4189"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4189",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4189"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4190",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4190"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4190",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4190"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4190",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4190"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4217",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4217"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4217",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4217"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4217",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4217"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4218",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4218"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4218",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4218"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4218",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4218"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4219",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4219"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4219",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4219"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4219",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4219"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4220",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4220"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4220",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4220"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4220",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4220"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4221",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4221"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4221",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4221"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4221",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4221"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4222",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4222"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4222",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4222"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4222",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4222"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4223",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2016-4224 and CVE-2016-4225.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4223"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4223",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4223"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4223",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4223"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4224",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2016-4223 and CVE-2016-4225.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4224"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4224",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4224"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4224",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4224"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4225",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2016-4223 and CVE-2016-4224.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4225"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4225",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4225"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4225",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4225"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4226",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4226"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4226",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4226"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4226",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4226"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4227",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4227"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4227",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4227"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4228",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4228"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4228",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4228"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4228",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4228"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4229",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4229"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4229",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4229"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4229",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4229"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4230",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4230"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4230",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4230"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4230",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4230"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4231",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4231"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4231",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4231"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4231",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4231"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4232",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information from process memory via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4232"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4232",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4232"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4232",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4232"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4233",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4233"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4233",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4233"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4233",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4233"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4234",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4234"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4234",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4234"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4234",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4234"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4235",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4235"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4235",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4235"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4235",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4235"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4236",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4236"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4236",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4236"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4236",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4236"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4237",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4237"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4237",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4237"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4237",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4237"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4238",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4238"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4238",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4238"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4238",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4238"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4239",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4239"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4239",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4239"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4239",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4239"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4240",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4240"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4240",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4240"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4240",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4240"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4241",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4241"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4241",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4241"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4241",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4241"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4242",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4242"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4242",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4242"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4242",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4242"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4243",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4243"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4243",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4243"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4244",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4244"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4244",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4244"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4244",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4244"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4245",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4245"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4245",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4245"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4245",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4245"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4246",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, and CVE-2016-4245.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4246"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4246",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4246"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4246",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4246"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4247",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4247"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4247",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4247"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4247",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4247"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4248",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, and CVE-2016-4231.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4248"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4248",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4248"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4248",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4248"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4249",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4249"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4249",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4249"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4249",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4249"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-7020",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-7020"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-7020",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7020"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-7020",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7020"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
}
]
}
RHSA-2016:1423
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.\n\nThis update upgrades Flash Player to version 11.2.202.632.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2016-4172, CVE-2016-4173, CVE-2016-4174, CVE-2016-4175, CVE-2016-4176, CVE-2016-4177, CVE-2016-4178, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4222, CVE-2016-4223, CVE-2016-4224, CVE-2016-4225, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, CVE-2016-4232, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, CVE-2016-4246, CVE-2016-4247, CVE-2016-4248, CVE-2016-4249)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:1423",
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
},
{
"category": "external",
"summary": "1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1423.json"
}
],
"title": "Red Hat Security Advisory: flash-plugin security update",
"tracking": {
"current_release_date": "2025-09-26T03:48:09+00:00",
"generator": {
"date": "2025-09-26T03:48:09+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.8"
}
},
"id": "RHSA-2016:1423",
"initial_release_date": "2016-07-13T18:22:39+00:00",
"revision_history": [
{
"date": "2016-07-13T18:22:39+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-07-13T18:22:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-26T03:48:09+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.632-1.el5_11.i386",
"product": {
"name": "flash-plugin-0:11.2.202.632-1.el5_11.i386",
"product_id": "flash-plugin-0:11.2.202.632-1.el5_11.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.632-1.el5_11?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"product": {
"name": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"product_id": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.632-1.el6_8?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.632-1.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386"
},
"product_reference": "flash-plugin-0:11.2.202.632-1.el5_11.i386",
"relates_to_product_reference": "5Client-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.632-1.el5_11.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386"
},
"product_reference": "flash-plugin-0:11.2.202.632-1.el5_11.i386",
"relates_to_product_reference": "5Server-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.632-1.el6_8.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
},
"product_reference": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"relates_to_product_reference": "6Client-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.632-1.el6_8.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
},
"product_reference": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"relates_to_product_reference": "6Server-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.632-1.el6_8.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
},
"product_reference": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.8.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-4172",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4172"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4172",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4172"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4172",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4172"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4173",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4173"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4173",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4173"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4173",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4173"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4174",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4174"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4174",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4174"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4174",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4174"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4175",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4175"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4175",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4175"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4176",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4177.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4176"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4176",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4176"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4176",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4176"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4177",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4176.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4177"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4177",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4177"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4177",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4177"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4178",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4178"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4178",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4178"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4179",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4179"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4179",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4179"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4179",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4179"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4180",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4180"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4180",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4180"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4180",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4180"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4181",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4181"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4181",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4181"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4182",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4182"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4182",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4182"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4182",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4182"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4183",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4183"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4183",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4183"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4184",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4184"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4184",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4184"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4184",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4184"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4185",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4185"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4185",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4185"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4185",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4185"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4186",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4186"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4186",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4186"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4187",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4187"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4187",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4187"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4187",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4187"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4188",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4188"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4188",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4188"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4188",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4188"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4189",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4189"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4189",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4189"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4189",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4189"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4190",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4190"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4190",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4190"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4190",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4190"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4217",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4217"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4217",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4217"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4217",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4217"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4218",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4218"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4218",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4218"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4218",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4218"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4219",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4219"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4219",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4219"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4219",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4219"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4220",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4220"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4220",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4220"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4220",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4220"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4221",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4221"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4221",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4221"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4221",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4221"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4222",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4222"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4222",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4222"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4222",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4222"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4223",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2016-4224 and CVE-2016-4225.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4223"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4223",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4223"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4223",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4223"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4224",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2016-4223 and CVE-2016-4225.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4224"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4224",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4224"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4224",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4224"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4225",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2016-4223 and CVE-2016-4224.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4225"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4225",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4225"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4225",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4225"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4226",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4226"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4226",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4226"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4226",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4226"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4227",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4227"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4227",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4227"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4228",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4228"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4228",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4228"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4228",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4228"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4229",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4229"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4229",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4229"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4229",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4229"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4230",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4230"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4230",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4230"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4230",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4230"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4231",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4231"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4231",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4231"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4231",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4231"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4232",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information from process memory via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4232"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4232",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4232"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4232",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4232"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4233",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4233"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4233",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4233"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4233",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4233"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4234",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4234"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4234",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4234"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4234",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4234"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4235",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4235"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4235",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4235"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4235",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4235"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4236",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4236"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4236",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4236"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4236",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4236"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4237",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4237"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4237",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4237"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4237",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4237"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4238",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4238"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4238",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4238"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4238",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4238"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4239",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4239"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4239",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4239"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4239",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4239"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4240",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4240"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4240",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4240"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4240",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4240"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4241",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4241"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4241",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4241"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4241",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4241"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4242",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4242"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4242",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4242"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4242",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4242"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4243",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4243"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4243",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4243"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4244",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4244"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4244",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4244"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4244",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4244"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4245",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4245"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4245",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4245"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4245",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4245"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4246",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, and CVE-2016-4245.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4246"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4246",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4246"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4246",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4246"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4247",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4247"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4247",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4247"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4247",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4247"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4248",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, and CVE-2016-4231.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4248"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4248",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4248"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4248",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4248"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4249",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4249"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4249",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4249"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4249",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4249"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-7020",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-7020"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-7020",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7020"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-7020",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7020"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
}
]
}
rhsa-2016_1423
Vulnerability from csaf_redhat
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.\n\nThis update upgrades Flash Player to version 11.2.202.632.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2016-4172, CVE-2016-4173, CVE-2016-4174, CVE-2016-4175, CVE-2016-4176, CVE-2016-4177, CVE-2016-4178, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4222, CVE-2016-4223, CVE-2016-4224, CVE-2016-4225, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, CVE-2016-4232, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, CVE-2016-4246, CVE-2016-4247, CVE-2016-4248, CVE-2016-4249)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:1423",
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
},
{
"category": "external",
"summary": "1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1423.json"
}
],
"title": "Red Hat Security Advisory: flash-plugin security update",
"tracking": {
"current_release_date": "2024-11-14T20:46:52+00:00",
"generator": {
"date": "2024-11-14T20:46:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2016:1423",
"initial_release_date": "2016-07-13T18:22:39+00:00",
"revision_history": [
{
"date": "2016-07-13T18:22:39+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-07-13T18:22:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T20:46:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.8.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.632-1.el5_11.i386",
"product": {
"name": "flash-plugin-0:11.2.202.632-1.el5_11.i386",
"product_id": "flash-plugin-0:11.2.202.632-1.el5_11.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.632-1.el5_11?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"product": {
"name": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"product_id": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.632-1.el6_8?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.632-1.el5_11.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386"
},
"product_reference": "flash-plugin-0:11.2.202.632-1.el5_11.i386",
"relates_to_product_reference": "5Client-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.632-1.el5_11.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386"
},
"product_reference": "flash-plugin-0:11.2.202.632-1.el5_11.i386",
"relates_to_product_reference": "5Server-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.632-1.el6_8.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
},
"product_reference": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"relates_to_product_reference": "6Client-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.632-1.el6_8.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
},
"product_reference": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"relates_to_product_reference": "6Server-Supplementary-6.8.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.632-1.el6_8.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
},
"product_reference": "flash-plugin-0:11.2.202.632-1.el6_8.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.8.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-4172",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4172"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4172",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4172"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4172",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4172"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4173",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4173"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4173",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4173"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4173",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4173"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4174",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4174"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4174",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4174"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4174",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4174"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4175",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4175"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4175",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4175"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4176",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4177.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4176"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4176",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4176"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4176",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4176"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4177",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4176.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4177"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4177",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4177"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4177",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4177"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4178",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4178"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4178",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4178"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4179",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4179"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4179",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4179"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4179",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4179"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4180",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4180"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4180",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4180"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4180",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4180"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4181",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4181"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4181",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4181"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4182",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4182"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4182",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4182"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4182",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4182"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4183",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4183"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4183",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4183"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4184",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4184"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4184",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4184"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4184",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4184"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4185",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4185"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4185",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4185"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4185",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4185"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4186",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4186"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4186",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4186"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4187",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4187"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4187",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4187"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4187",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4187"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4188",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4188"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4188",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4188"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4188",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4188"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4189",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4189"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4189",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4189"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4189",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4189"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4190",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4190"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4190",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4190"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4190",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4190"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4217",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4217"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4217",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4217"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4217",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4217"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4218",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4218"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4218",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4218"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4218",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4218"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4219",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4219"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4219",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4219"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4219",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4219"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4220",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4220"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4220",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4220"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4220",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4220"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4221",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4221"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4221",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4221"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4221",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4221"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4222",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4222"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4222",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4222"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4222",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4222"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4223",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2016-4224 and CVE-2016-4225.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4223"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4223",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4223"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4223",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4223"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4224",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2016-4223 and CVE-2016-4225.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4224"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4224",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4224"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4224",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4224"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4225",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2016-4223 and CVE-2016-4224.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4225"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4225",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4225"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4225",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4225"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4226",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4226"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4226",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4226"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4226",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4226"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4227",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4227"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4227",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4227"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4228",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4228"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4228",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4228"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4228",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4228"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4229",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4229"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4229",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4229"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4229",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4229"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4230",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4230"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4230",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4230"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4230",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4230"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4231",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4231"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4231",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4231"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4231",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4231"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4232",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information from process memory via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4232"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4232",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4232"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4232",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4232"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4233",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4233"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4233",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4233"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4233",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4233"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4234",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4234"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4234",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4234"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4234",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4234"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4235",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4235"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4235",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4235"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4235",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4235"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4236",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4236"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4236",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4236"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4236",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4236"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4237",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4237"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4237",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4237"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4237",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4237"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4238",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4238"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4238",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4238"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4238",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4238"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4239",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4239"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4239",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4239"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4239",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4239"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4240",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4240"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4240",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4240"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4240",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4240"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4241",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4241"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4241",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4241"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4241",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4241"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4242",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4242"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4242",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4242"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4242",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4242"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4243",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4243"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4243",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4243"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4244",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4245, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4244"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4244",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4244"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4244",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4244"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4245",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, and CVE-2016-4246.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4245"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4245",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4245"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4245",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4245"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4246",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, and CVE-2016-4245.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4246"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4246",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4246"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4246",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4246"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4247",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4247"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4247",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4247"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4247",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4247"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4248",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, and CVE-2016-4231.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4248"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4248",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4248"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4248",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4248"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-4249",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4249"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4249",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4249"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4249",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4249"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
},
{
"cve": "CVE-2016-7020",
"discovery_date": "2016-07-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1355971"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-25",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-7020"
},
{
"category": "external",
"summary": "RHBZ#1355971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-7020",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7020"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-7020",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7020"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
],
"release_date": "2016-07-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-07-13T18:22:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.632-1.el5_11.i386",
"6Client-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Server-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686",
"6Workstation-Supplementary-6.8.z:flash-plugin-0:11.2.202.632-1.el6_8.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-25"
}
]
}
CERTFR-2016-AVI-234
Vulnerability from certfr_avis
De multiples vulnérabilités ont été corrigées dans Adobe Flash Player. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | N/A | Adobe Flash Player ESR versions antérieures à 18.0.0.366 sur Windows et Macintosh | ||
| Adobe | N/A | Adobe Flash Player pour Microsoft Edge et Internet Explorer 11 versions antérieures à 22.0.0.209 sur Windows 10 et 8.1 | ||
| Adobe | N/A | Adobe Flash Player pour Google Chrome versions antérieures à 22.0.0.209 sur Windows, Macintosh, Linux et ChromeOS | ||
| Adobe | N/A | Adobe Flash Player Desktop Runtime versions antérieures à 22.0.0.209 sur Windows et Macintosh | ||
| Adobe | N/A | Adobe Flash Player pour Linux versions antérieures à 11.2.202.632 sur Linux |
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Flash Player ESR versions ant\u00e9rieures \u00e0 18.0.0.366 sur Windows et Macintosh",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Microsoft Edge et Internet Explorer 11 versions ant\u00e9rieures \u00e0 22.0.0.209 sur Windows 10 et 8.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Google Chrome versions ant\u00e9rieures \u00e0 22.0.0.209 sur Windows, Macintosh, Linux et ChromeOS",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player Desktop Runtime versions ant\u00e9rieures \u00e0 22.0.0.209 sur Windows et Macintosh",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Linux versions ant\u00e9rieures \u00e0 11.2.202.632 sur Linux",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2016-4174",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4174"
},
{
"name": "CVE-2016-4182",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4182"
},
{
"name": "CVE-2016-4233",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4233"
},
{
"name": "CVE-2016-4236",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4236"
},
{
"name": "CVE-2016-4234",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4234"
},
{
"name": "CVE-2016-4232",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4232"
},
{
"name": "CVE-2016-4188",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4188"
},
{
"name": "CVE-2016-4241",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4241"
},
{
"name": "CVE-2016-4186",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4186"
},
{
"name": "CVE-2016-4225",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4225"
},
{
"name": "CVE-2016-4178",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4178"
},
{
"name": "CVE-2016-4240",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4240"
},
{
"name": "CVE-2016-4220",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4220"
},
{
"name": "CVE-2016-4189",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4189"
},
{
"name": "CVE-2016-4217",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4217"
},
{
"name": "CVE-2016-4184",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4184"
},
{
"name": "CVE-2016-4222",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4222"
},
{
"name": "CVE-2016-4172",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4172"
},
{
"name": "CVE-2016-4237",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4237"
},
{
"name": "CVE-2016-4219",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4219"
},
{
"name": "CVE-2016-4230",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4230"
},
{
"name": "CVE-2016-4176",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4176"
},
{
"name": "CVE-2016-4249",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4249"
},
{
"name": "CVE-2016-4179",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4179"
},
{
"name": "CVE-2016-4218",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4218"
},
{
"name": "CVE-2016-4228",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4228"
},
{
"name": "CVE-2016-4248",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4248"
},
{
"name": "CVE-2016-4226",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4226"
},
{
"name": "CVE-2016-4227",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4227"
},
{
"name": "CVE-2016-4223",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4223"
},
{
"name": "CVE-2016-4231",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4231"
},
{
"name": "CVE-2016-4247",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4247"
},
{
"name": "CVE-2016-4244",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4244"
},
{
"name": "CVE-2016-4245",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4245"
},
{
"name": "CVE-2016-4243",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4243"
},
{
"name": "CVE-2016-4185",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4185"
},
{
"name": "CVE-2016-4180",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4180"
},
{
"name": "CVE-2016-4181",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4181"
},
{
"name": "CVE-2016-4190",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4190"
},
{
"name": "CVE-2016-4239",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4239"
},
{
"name": "CVE-2016-4183",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4183"
},
{
"name": "CVE-2016-4221",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4221"
},
{
"name": "CVE-2016-4235",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4235"
},
{
"name": "CVE-2016-4238",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4238"
},
{
"name": "CVE-2016-4246",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4246"
},
{
"name": "CVE-2016-4229",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4229"
},
{
"name": "CVE-2016-4187",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4187"
},
{
"name": "CVE-2016-4175",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4175"
},
{
"name": "CVE-2016-4224",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4224"
},
{
"name": "CVE-2016-4177",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4177"
},
{
"name": "CVE-2016-4173",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4173"
},
{
"name": "CVE-2016-4242",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4242"
}
],
"initial_release_date": "2016-07-13T00:00:00",
"last_revision_date": "2016-07-13T00:00:00",
"links": [],
"reference": "CERTFR-2016-AVI-234",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2016-07-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eAdobe Flash Player\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et\nune atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Adobe Flash Player",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB16-25 du 12 juillet 2016",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
}
]
}
CERTFR-2016-AVI-229
Vulnerability from certfr_avis
De multiples vulnérabilités ont été corrigées dans Microsoft Edge. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Microsoft Edge sur Windows 10
| Vendor | Product | Description |
|---|
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eMicrosoft Edge sur Windows 10\u003c/P\u003e",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2016-4174",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4174"
},
{
"name": "CVE-2016-4182",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4182"
},
{
"name": "CVE-2016-3265",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3265"
},
{
"name": "CVE-2016-4232",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4232"
},
{
"name": "CVE-2016-4188",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4188"
},
{
"name": "CVE-2016-4225",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4225"
},
{
"name": "CVE-2016-4178",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4178"
},
{
"name": "CVE-2016-4222",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4222"
},
{
"name": "CVE-2016-4230",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4230"
},
{
"name": "CVE-2016-4176",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4176"
},
{
"name": "CVE-2016-4249",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4249"
},
{
"name": "CVE-2016-4179",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4179"
},
{
"name": "CVE-2016-3244",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3244"
},
{
"name": "CVE-2016-3277",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3277"
},
{
"name": "CVE-2016-4228",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4228"
},
{
"name": "CVE-2016-3259",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3259"
},
{
"name": "CVE-2016-3248",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3248"
},
{
"name": "CVE-2016-4248",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4248"
},
{
"name": "CVE-2016-4226",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4226"
},
{
"name": "CVE-2016-4227",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4227"
},
{
"name": "CVE-2016-4223",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4223"
},
{
"name": "CVE-2016-4231",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4231"
},
{
"name": "CVE-2016-4247",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4247"
},
{
"name": "CVE-2016-3260",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3260"
},
{
"name": "CVE-2016-3273",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3273"
},
{
"name": "CVE-2016-4185",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4185"
},
{
"name": "CVE-2016-3246",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3246"
},
{
"name": "CVE-2016-3274",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3274"
},
{
"name": "CVE-2016-3269",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3269"
},
{
"name": "CVE-2016-3271",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3271"
},
{
"name": "CVE-2016-3276",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3276"
},
{
"name": "CVE-2016-3264",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3264"
},
{
"name": "CVE-2016-4229",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4229"
},
{
"name": "CVE-2016-4175",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4175"
},
{
"name": "CVE-2016-4224",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4224"
},
{
"name": "CVE-2016-4177",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4177"
},
{
"name": "CVE-2016-4173",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4173"
}
],
"initial_release_date": "2016-07-12T00:00:00",
"last_revision_date": "2016-07-12T00:00:00",
"links": [],
"reference": "CERTFR-2016-AVI-229",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2016-07-12T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Edge\u003c/span\u003e. Certaines d\u0027entre elles permettent\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance,\nun contournement de la politique de s\u00e9curit\u00e9 et une atteinte \u00e0\nl\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS16-093 du 12 juillet 2016",
"url": "https://technet.microsoft.com/fr-fr/library/security/MS16-093"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS16-085 du 12 juillet 2016",
"url": "https://technet.microsoft.com/fr-fr/library/security/MS16-085"
}
]
}
CERTFR-2016-AVI-228
Vulnerability from certfr_avis
De multiples vulnérabilités ont été corrigées dans Microsoft Internet Explorer. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Internet Explorer 9",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Internet Explorer 10",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Internet Explorer 11",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2016-4174",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4174"
},
{
"name": "CVE-2016-4182",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4182"
},
{
"name": "CVE-2016-3245",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3245"
},
{
"name": "CVE-2016-3243",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3243"
},
{
"name": "CVE-2016-4232",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4232"
},
{
"name": "CVE-2016-4188",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4188"
},
{
"name": "CVE-2016-3261",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3261"
},
{
"name": "CVE-2016-4225",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4225"
},
{
"name": "CVE-2016-4178",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4178"
},
{
"name": "CVE-2016-4222",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4222"
},
{
"name": "CVE-2016-4230",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4230"
},
{
"name": "CVE-2016-4176",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4176"
},
{
"name": "CVE-2016-4249",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4249"
},
{
"name": "CVE-2016-4179",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4179"
},
{
"name": "CVE-2016-3277",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3277"
},
{
"name": "CVE-2016-4228",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4228"
},
{
"name": "CVE-2016-3259",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3259"
},
{
"name": "CVE-2016-3248",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3248"
},
{
"name": "CVE-2016-4248",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4248"
},
{
"name": "CVE-2016-4226",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4226"
},
{
"name": "CVE-2016-4227",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4227"
},
{
"name": "CVE-2016-4223",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4223"
},
{
"name": "CVE-2016-4231",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4231"
},
{
"name": "CVE-2016-4247",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4247"
},
{
"name": "CVE-2016-3260",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3260"
},
{
"name": "CVE-2016-3204",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3204"
},
{
"name": "CVE-2016-3273",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3273"
},
{
"name": "CVE-2016-4185",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4185"
},
{
"name": "CVE-2016-3274",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3274"
},
{
"name": "CVE-2016-3241",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3241"
},
{
"name": "CVE-2016-3276",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3276"
},
{
"name": "CVE-2016-4229",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4229"
},
{
"name": "CVE-2016-4175",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4175"
},
{
"name": "CVE-2016-4224",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4224"
},
{
"name": "CVE-2016-4177",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4177"
},
{
"name": "CVE-2016-4173",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4173"
},
{
"name": "CVE-2016-3242",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3242"
},
{
"name": "CVE-2016-3240",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3240"
}
],
"initial_release_date": "2016-07-12T00:00:00",
"last_revision_date": "2016-07-12T00:00:00",
"links": [],
"reference": "CERTFR-2016-AVI-228",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2016-07-12T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Internet Explorer\u003c/span\u003e. Certaines d\u0027entre\nelles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code\narbitraire \u00e0 distance, un contournement de la politique de s\u00e9curit\u00e9 et\nune atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Internet Explorer",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS16-093 du 12 juillet 2016",
"url": "https://technet.microsoft.com/fr-fr/library/security/MS16-093"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS16-084 du 12 juillet 2016",
"url": "https://technet.microsoft.com/fr-fr/library/security/MS16-084"
}
]
}
cnvd-2016-04875
Vulnerability from cnvd
用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞: https://helpx.adobe.com/security/products/flash-player/apsb16-25.html
| Name | ['Adobe Flash Player <18.0.0.366', 'Adobe Flash Player(on Linux) <11.2.202.632', 'Adobe Flash Player (on Windows and OS X) >=19.*,<=22.0.0.209'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2016-4188"
}
},
"description": "Adobe Flash Player\u662f\u7f8e\u56fd\u5965\u591a\u6bd4\uff08Adobe\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u8de8\u5e73\u53f0\u3001\u57fa\u4e8e\u6d4f\u89c8\u5668\u7684\u591a\u5a92\u4f53\u64ad\u653e\u5668\u4ea7\u54c1\u3002\u8be5\u4ea7\u54c1\u652f\u6301\u8de8\u5c4f\u5e55\u548c\u6d4f\u89c8\u5668\u67e5\u770b\u5e94\u7528\u7a0b\u5e8f\u3001\u5185\u5bb9\u548c\u89c6\u9891\u3002 \r\n\r\nAdobe Flash Player\u4e2d\u5b58\u5728\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5185\u5b58\u7834\u574f\uff09\u3002",
"discovererName": "These updates resolve memory corruption vulnerabilities that could lead to code execution",
"formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u53d6\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttps://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2016-04875",
"openTime": "2016-07-18",
"patchDescription": "Adobe Flash Player\u662f\u7f8e\u56fd\u5965\u591a\u6bd4\uff08Adobe\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u8de8\u5e73\u53f0\u3001\u57fa\u4e8e\u6d4f\u89c8\u5668\u7684\u591a\u5a92\u4f53\u64ad\u653e\u5668\u4ea7\u54c1\u3002\u8be5\u4ea7\u54c1\u652f\u6301\u8de8\u5c4f\u5e55\u548c\u6d4f\u89c8\u5668\u67e5\u770b\u5e94\u7528\u7a0b\u5e8f\u3001\u5185\u5bb9\u548c\u89c6\u9891\u3002 \r\n\r\nAdobe Flash Player\u4e2d\u5b58\u5728\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5185\u5b58\u7834\u574f\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Adobe Flash Player\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\uff08\tCNVD-2016-04875\uff09\u7684\u8865\u4e01",
"products": {
"product": [
"Adobe Flash Player \u003c18.0.0.366",
"Adobe Flash Player(on Linux) \u003c11.2.202.632",
"Adobe Flash Player (on Windows and OS X) \u003e=19.*\uff0c\u003c=22.0.0.209"
]
},
"referenceLink": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"serverity": "\u9ad8",
"submitTime": "2016-07-14",
"title": "Adobe Flash Player\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\uff08\tCNVD-2016-04875\uff09"
}
ghsa-w894-7wf4-7w3j
Vulnerability from github
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.
{
"affected": [],
"aliases": [
"CVE-2016-4188"
],
"database_specific": {
"cwe_ids": [
"CWE-119",
"CWE-787"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2016-07-13T01:59:00Z",
"severity": "CRITICAL"
},
"details": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"id": "GHSA-w894-7wf4-7w3j",
"modified": "2023-01-25T06:31:07Z",
"published": "2022-05-14T02:22:52Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4188"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
},
{
"type": "WEB",
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/91725"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1036280"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
gsd-2016-4188
Vulnerability from gsd
{
"GSD": {
"alias": "CVE-2016-4188",
"description": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"id": "GSD-2016-4188",
"references": [
"https://www.suse.com/security/cve/CVE-2016-4188.html",
"https://access.redhat.com/errata/RHSA-2016:1423",
"https://advisories.mageia.org/CVE-2016-4188.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2016-4188"
],
"details": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"id": "GSD-2016-4188",
"modified": "2023-12-13T01:21:18.998807Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2016-4188",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "SUSE-SU-2016:1826",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html"
},
{
"name": "openSUSE-SU-2016:1802",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html"
},
{
"name": "91725",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/91725"
},
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"refsource": "CONFIRM",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
},
{
"name": "RHSA-2016:1423",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
},
{
"name": "MS16-093",
"refsource": "MS",
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093"
},
{
"name": "1036280",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1036280"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "22.0.0.192",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*",
"cpe_name": [],
"versionEndIncluding": "18.0.0.360",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
"cpe_name": [],
"versionEndIncluding": "22.0.0.192",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
"cpe_name": [],
"versionEndIncluding": "22.0.0.192",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
"cpe_name": [],
"versionEndIncluding": "22.0.0.192",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "11.2.202.626",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2016-4188"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
},
{
"name": "SUSE-SU-2016:1826",
"refsource": "SUSE",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html"
},
{
"name": "openSUSE-SU-2016:1802",
"refsource": "SUSE",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html"
},
{
"name": "91725",
"refsource": "BID",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/91725"
},
{
"name": "1036280",
"refsource": "SECTRACK",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1036280"
},
{
"name": "RHSA-2016:1423",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2016:1423"
},
{
"name": "MS16-093",
"refsource": "MS",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": true
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
},
"lastModifiedDate": "2023-01-25T03:31Z",
"publishedDate": "2016-07-13T01:59Z"
}
}
}
suse-su-2016:1826-1
Vulnerability from csaf_suse
Notes
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for flash-player",
"title": "Title of the patch"
},
{
"category": "description",
"text": "Adobe Flash Player was updated to 11.2.202.632 to fix many security issues tracked under the upstream advisory APSB16-25, allowing remote attackers to execute arbitrary code when delivering specially crafted Flash content. \n\nThe following vulnerabilities were fixed:\n\n- CVE-2016-4172: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4173: use-after-free vulnerability that could lead to code execution\n- CVE-2016-4174: use-after-free vulnerability that could lead to code execution\n- CVE-2016-4175: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4176: stack corruption vulnerability that could lead to code execution\n- CVE-2016-4177: stack corruption vulnerability that could lead to code execution\n- CVE-2016-4178: security bypass vulnerability that could lead to information disclosure\n- CVE-2016-4179: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4180: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4181: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4182: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4183: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4184: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4185: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4186: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4187: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4188: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4189: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4190: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4217: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4218: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4219: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4220: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4221: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4222: use-after-free vulnerability that could lead to code execution\n- CVE-2016-4223: type confusion vulnerability that could lead to code execution\n- CVE-2016-4224: type confusion vulnerability that could lead to code execution\n- CVE-2016-4225: type confusion vulnerability that could lead to code execution\n- CVE-2016-4226: use-after-free vulnerability that could lead to code execution\n- CVE-2016-4227: use-after-free vulnerability that could lead to code execution\n- CVE-2016-4228: use-after-free vulnerability that could lead to code execution\n- CVE-2016-4229: use-after-free vulnerability that could lead to code execution\n- CVE-2016-4230: use-after-free vulnerability that could lead to code execution\n- CVE-2016-4231: use-after-free vulnerability that could lead to code execution\n- CVE-2016-4232: memory leak vulnerability\n- CVE-2016-4233: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4234: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4235: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4236: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4237: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4238: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4239: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4240: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4241: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4242: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4243: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4244: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4245: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4246: memory corruption vulnerability that could lead to code execution\n- CVE-2016-4247: race condition vulnerability that could lead to information disclosure\n- CVE-2016-4248: use-after-free vulnerability that could lead to code execution\n- CVE-2016-4249: heap buffer overflow vulnerability that could lead to code execution",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-SP1-2016-1073,SUSE-SLE-WE-12-SP1-2016-1073",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1826-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:1826-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161826-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:1826-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-July/002160.html"
},
{
"category": "self",
"summary": "SUSE Bug 988579",
"url": "https://bugzilla.suse.com/988579"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4172 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4172/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4173 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4173/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4174 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4175 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4176 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4176/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4177 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4178 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4179 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4180 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4181 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4181/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4182 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4183 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4184 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4184/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4185 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4186 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4186/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4187 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4188 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4188/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4189 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4189/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4190 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4217 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4218 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4218/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4219 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4219/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4220 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4220/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4221 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4221/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4222 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4223 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4224 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4225 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4226 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4226/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4227 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4228 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4228/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4229 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4229/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4230 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4231 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4232 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4233 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4234 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4234/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4235 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4235/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4236 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4237 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4237/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4238 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4238/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4239 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4239/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4240 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4240/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4241 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4241/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4242 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4242/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4243 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4243/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4244 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4244/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4245 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4245/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4246 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4246/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4247 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4247/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4248 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4248/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4249 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4249/"
}
],
"title": "Security update for flash-player",
"tracking": {
"current_release_date": "2016-07-20T12:53:00Z",
"generator": {
"date": "2016-07-20T12:53:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:1826-1",
"initial_release_date": "2016-07-20T12:53:00Z",
"revision_history": [
{
"date": "2016-07-20T12:53:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "flash-player-11.2.202.632-137.1.x86_64",
"product": {
"name": "flash-player-11.2.202.632-137.1.x86_64",
"product_id": "flash-player-11.2.202.632-137.1.x86_64"
}
},
{
"category": "product_version",
"name": "flash-player-gnome-11.2.202.632-137.1.x86_64",
"product": {
"name": "flash-player-gnome-11.2.202.632-137.1.x86_64",
"product_id": "flash-player-gnome-11.2.202.632-137.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-11.2.202.632-137.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64"
},
"product_reference": "flash-player-11.2.202.632-137.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-gnome-11.2.202.632-137.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
},
"product_reference": "flash-player-gnome-11.2.202.632-137.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-11.2.202.632-137.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64"
},
"product_reference": "flash-player-11.2.202.632-137.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-gnome-11.2.202.632-137.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
},
"product_reference": "flash-player-gnome-11.2.202.632-137.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-4172",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4172"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4172",
"url": "https://www.suse.com/security/cve/CVE-2016-4172"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4172",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4172"
},
{
"cve": "CVE-2016-4173",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4173"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4173",
"url": "https://www.suse.com/security/cve/CVE-2016-4173"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4173",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4173"
},
{
"cve": "CVE-2016-4174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4174"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4174",
"url": "https://www.suse.com/security/cve/CVE-2016-4174"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4174",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4174"
},
{
"cve": "CVE-2016-4175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4175"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4175",
"url": "https://www.suse.com/security/cve/CVE-2016-4175"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4175",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4175"
},
{
"cve": "CVE-2016-4176",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4176"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4177.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4176",
"url": "https://www.suse.com/security/cve/CVE-2016-4176"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4176",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4176"
},
{
"cve": "CVE-2016-4177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4177"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4176.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4177",
"url": "https://www.suse.com/security/cve/CVE-2016-4177"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4177",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4177"
},
{
"cve": "CVE-2016-4178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4178"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4178",
"url": "https://www.suse.com/security/cve/CVE-2016-4178"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4178",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4178"
},
{
"cve": "CVE-2016-4179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4179"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4179",
"url": "https://www.suse.com/security/cve/CVE-2016-4179"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4179",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4179"
},
{
"cve": "CVE-2016-4180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4180"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4180",
"url": "https://www.suse.com/security/cve/CVE-2016-4180"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4180",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4180"
},
{
"cve": "CVE-2016-4181",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4181"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4181",
"url": "https://www.suse.com/security/cve/CVE-2016-4181"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4181",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4181"
},
{
"cve": "CVE-2016-4182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4182"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4182",
"url": "https://www.suse.com/security/cve/CVE-2016-4182"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4182",
"url": "https://bugzilla.suse.com/988579"
},
{
"category": "external",
"summary": "SUSE Bug 998589 for CVE-2016-4182",
"url": "https://bugzilla.suse.com/998589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4182"
},
{
"cve": "CVE-2016-4183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4183"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4183",
"url": "https://www.suse.com/security/cve/CVE-2016-4183"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4183",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4183"
},
{
"cve": "CVE-2016-4184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4184"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4184",
"url": "https://www.suse.com/security/cve/CVE-2016-4184"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4184",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4184"
},
{
"cve": "CVE-2016-4185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4185"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4185",
"url": "https://www.suse.com/security/cve/CVE-2016-4185"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4185",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4185"
},
{
"cve": "CVE-2016-4186",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4186"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4186",
"url": "https://www.suse.com/security/cve/CVE-2016-4186"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4186",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4186"
},
{
"cve": "CVE-2016-4187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4187"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4187",
"url": "https://www.suse.com/security/cve/CVE-2016-4187"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4187",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4187"
},
{
"cve": "CVE-2016-4188",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4188"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4188",
"url": "https://www.suse.com/security/cve/CVE-2016-4188"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4188",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4188"
},
{
"cve": "CVE-2016-4189",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4189"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4189",
"url": "https://www.suse.com/security/cve/CVE-2016-4189"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4189",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4189"
},
{
"cve": "CVE-2016-4190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4190"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4190",
"url": "https://www.suse.com/security/cve/CVE-2016-4190"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4190",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4190"
},
{
"cve": "CVE-2016-4217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4217"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4217",
"url": "https://www.suse.com/security/cve/CVE-2016-4217"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4217",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4217"
},
{
"cve": "CVE-2016-4218",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4218"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4218",
"url": "https://www.suse.com/security/cve/CVE-2016-4218"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4218",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4218"
},
{
"cve": "CVE-2016-4219",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4219"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4219",
"url": "https://www.suse.com/security/cve/CVE-2016-4219"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4219",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4219"
},
{
"cve": "CVE-2016-4220",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4220"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4220",
"url": "https://www.suse.com/security/cve/CVE-2016-4220"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4220",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4220"
},
{
"cve": "CVE-2016-4221",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4221"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4221",
"url": "https://www.suse.com/security/cve/CVE-2016-4221"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4221",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4221"
},
{
"cve": "CVE-2016-4222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4222"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4222",
"url": "https://www.suse.com/security/cve/CVE-2016-4222"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4222",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4222"
},
{
"cve": "CVE-2016-4223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4223"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2016-4224 and CVE-2016-4225.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4223",
"url": "https://www.suse.com/security/cve/CVE-2016-4223"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4223",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4223"
},
{
"cve": "CVE-2016-4224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4224"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2016-4223 and CVE-2016-4225.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4224",
"url": "https://www.suse.com/security/cve/CVE-2016-4224"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4224",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4224"
},
{
"cve": "CVE-2016-4225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4225"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2016-4223 and CVE-2016-4224.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4225",
"url": "https://www.suse.com/security/cve/CVE-2016-4225"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4225",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4225"
},
{
"cve": "CVE-2016-4226",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4226"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4226",
"url": "https://www.suse.com/security/cve/CVE-2016-4226"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4226",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4226"
},
{
"cve": "CVE-2016-4227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4227"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4227",
"url": "https://www.suse.com/security/cve/CVE-2016-4227"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4227",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4227"
},
{
"cve": "CVE-2016-4228",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4228"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4228",
"url": "https://www.suse.com/security/cve/CVE-2016-4228"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4228",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4228"
},
{
"cve": "CVE-2016-4229",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4229"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4229",
"url": "https://www.suse.com/security/cve/CVE-2016-4229"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4229",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4229"
},
{
"cve": "CVE-2016-4230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4230"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4231, and CVE-2016-4248.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4230",
"url": "https://www.suse.com/security/cve/CVE-2016-4230"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4230",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4230"
},
{
"cve": "CVE-2016-4231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4231"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, and CVE-2016-4248.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4231",
"url": "https://www.suse.com/security/cve/CVE-2016-4231"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4231",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4231"
},
{
"cve": "CVE-2016-4232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4232"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information from process memory via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4232",
"url": "https://www.suse.com/security/cve/CVE-2016-4232"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4232",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4232"
},
{
"cve": "CVE-2016-4233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4233"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4233",
"url": "https://www.suse.com/security/cve/CVE-2016-4233"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4233",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4233"
},
{
"cve": "CVE-2016-4234",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4234"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4234",
"url": "https://www.suse.com/security/cve/CVE-2016-4234"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4234",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4234"
},
{
"cve": "CVE-2016-4235",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4235"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4235",
"url": "https://www.suse.com/security/cve/CVE-2016-4235"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4235",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4235"
},
{
"cve": "CVE-2016-4236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4236"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4236",
"url": "https://www.suse.com/security/cve/CVE-2016-4236"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4236",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4236"
},
{
"cve": "CVE-2016-4237",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4237"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4237",
"url": "https://www.suse.com/security/cve/CVE-2016-4237"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4237",
"url": "https://bugzilla.suse.com/988579"
},
{
"category": "external",
"summary": "SUSE Bug 998589 for CVE-2016-4237",
"url": "https://bugzilla.suse.com/998589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4237"
},
{
"cve": "CVE-2016-4238",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4238"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4238",
"url": "https://www.suse.com/security/cve/CVE-2016-4238"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4238",
"url": "https://bugzilla.suse.com/988579"
},
{
"category": "external",
"summary": "SUSE Bug 998589 for CVE-2016-4238",
"url": "https://bugzilla.suse.com/998589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4238"
},
{
"cve": "CVE-2016-4239",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4239"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4239",
"url": "https://www.suse.com/security/cve/CVE-2016-4239"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4239",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4239"
},
{
"cve": "CVE-2016-4240",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4240"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4240",
"url": "https://www.suse.com/security/cve/CVE-2016-4240"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4240",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4240"
},
{
"cve": "CVE-2016-4241",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4241"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4241",
"url": "https://www.suse.com/security/cve/CVE-2016-4241"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4241",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4241"
},
{
"cve": "CVE-2016-4242",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4242"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4242",
"url": "https://www.suse.com/security/cve/CVE-2016-4242"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4242",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4242"
},
{
"cve": "CVE-2016-4243",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4243"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4243",
"url": "https://www.suse.com/security/cve/CVE-2016-4243"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4243",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4243"
},
{
"cve": "CVE-2016-4244",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4244"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4245, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4244",
"url": "https://www.suse.com/security/cve/CVE-2016-4244"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4244",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4244"
},
{
"cve": "CVE-2016-4245",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4245"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, and CVE-2016-4246.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4245",
"url": "https://www.suse.com/security/cve/CVE-2016-4245"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4245",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4245"
},
{
"cve": "CVE-2016-4246",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4246"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, and CVE-2016-4245.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4246",
"url": "https://www.suse.com/security/cve/CVE-2016-4246"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4246",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4246"
},
{
"cve": "CVE-2016-4247",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4247"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4247",
"url": "https://www.suse.com/security/cve/CVE-2016-4247"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4247",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4247"
},
{
"cve": "CVE-2016-4248",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4248"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4173, CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, and CVE-2016-4231.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4248",
"url": "https://www.suse.com/security/cve/CVE-2016-4248"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4248",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4248"
},
{
"cve": "CVE-2016-4249",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4249"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4249",
"url": "https://www.suse.com/security/cve/CVE-2016-4249"
},
{
"category": "external",
"summary": "SUSE Bug 988579 for CVE-2016-4249",
"url": "https://bugzilla.suse.com/988579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.632-137.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.632-137.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-07-20T12:53:00Z",
"details": "important"
}
],
"title": "CVE-2016-4249"
}
]
}
var-201607-0103
Vulnerability from variot
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246. Attackers can exploit these issues to execute arbitrary code in the context of the user running the affected applications. Failed exploit attempts will likely cause a denial-of-service condition. The product enables viewing of applications, content and video across screens and browsers. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
===================================================================== Red Hat Security Advisory
Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2016:1423-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://access.redhat.com/errata/RHSA-2016:1423 Issue date: 2016-07-13 CVE Names: CVE-2016-4172 CVE-2016-4173 CVE-2016-4174 CVE-2016-4175 CVE-2016-4176 CVE-2016-4177 CVE-2016-4178 CVE-2016-4179 CVE-2016-4180 CVE-2016-4181 CVE-2016-4182 CVE-2016-4183 CVE-2016-4184 CVE-2016-4185 CVE-2016-4186 CVE-2016-4187 CVE-2016-4188 CVE-2016-4189 CVE-2016-4190 CVE-2016-4217 CVE-2016-4218 CVE-2016-4219 CVE-2016-4220 CVE-2016-4221 CVE-2016-4222 CVE-2016-4223 CVE-2016-4224 CVE-2016-4225 CVE-2016-4226 CVE-2016-4227 CVE-2016-4228 CVE-2016-4229 CVE-2016-4230 CVE-2016-4231 CVE-2016-4232 CVE-2016-4233 CVE-2016-4234 CVE-2016-4235 CVE-2016-4236 CVE-2016-4237 CVE-2016-4238 CVE-2016-4239 CVE-2016-4240 CVE-2016-4241 CVE-2016-4242 CVE-2016-4243 CVE-2016-4244 CVE-2016-4245 CVE-2016-4246 CVE-2016-4247 CVE-2016-4248 CVE-2016-4249 =====================================================================
- Summary:
An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
- Description:
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.
This update upgrades Flash Player to version 11.2.202.632. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2016-4172, CVE-2016-4173, CVE-2016-4174, CVE-2016-4175, CVE-2016-4176, CVE-2016-4177, CVE-2016-4178, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4222, CVE-2016-4223, CVE-2016-4224, CVE-2016-4225, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, CVE-2016-4232, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, CVE-2016-4246, CVE-2016-4247, CVE-2016-4248, CVE-2016-4249)
- Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
- Bugs fixed (https://bugzilla.redhat.com/):
1355971 - flash-plugin: multiple code execution issues fixed in APSB16-25
- Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 5):
i386: flash-plugin-11.2.202.632-1.el5_11.i386.rpm
x86_64: flash-plugin-11.2.202.632-1.el5_11.i386.rpm
Red Hat Enterprise Linux Server Supplementary (v. 5):
i386: flash-plugin-11.2.202.632-1.el5_11.i386.rpm
x86_64: flash-plugin-11.2.202.632-1.el5_11.i386.rpm
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386: flash-plugin-11.2.202.632-1.el6_8.i686.rpm
x86_64: flash-plugin-11.2.202.632-1.el6_8.i686.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386: flash-plugin-11.2.202.632-1.el6_8.i686.rpm
x86_64: flash-plugin-11.2.202.632-1.el6_8.i686.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386: flash-plugin-11.2.202.632-1.el6_8.i686.rpm
x86_64: flash-plugin-11.2.202.632-1.el6_8.i686.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2016-4172 https://access.redhat.com/security/cve/CVE-2016-4173 https://access.redhat.com/security/cve/CVE-2016-4174 https://access.redhat.com/security/cve/CVE-2016-4175 https://access.redhat.com/security/cve/CVE-2016-4176 https://access.redhat.com/security/cve/CVE-2016-4177 https://access.redhat.com/security/cve/CVE-2016-4178 https://access.redhat.com/security/cve/CVE-2016-4179 https://access.redhat.com/security/cve/CVE-2016-4180 https://access.redhat.com/security/cve/CVE-2016-4181 https://access.redhat.com/security/cve/CVE-2016-4182 https://access.redhat.com/security/cve/CVE-2016-4183 https://access.redhat.com/security/cve/CVE-2016-4184 https://access.redhat.com/security/cve/CVE-2016-4185 https://access.redhat.com/security/cve/CVE-2016-4186 https://access.redhat.com/security/cve/CVE-2016-4187 https://access.redhat.com/security/cve/CVE-2016-4188 https://access.redhat.com/security/cve/CVE-2016-4189 https://access.redhat.com/security/cve/CVE-2016-4190 https://access.redhat.com/security/cve/CVE-2016-4217 https://access.redhat.com/security/cve/CVE-2016-4218 https://access.redhat.com/security/cve/CVE-2016-4219 https://access.redhat.com/security/cve/CVE-2016-4220 https://access.redhat.com/security/cve/CVE-2016-4221 https://access.redhat.com/security/cve/CVE-2016-4222 https://access.redhat.com/security/cve/CVE-2016-4223 https://access.redhat.com/security/cve/CVE-2016-4224 https://access.redhat.com/security/cve/CVE-2016-4225 https://access.redhat.com/security/cve/CVE-2016-4226 https://access.redhat.com/security/cve/CVE-2016-4227 https://access.redhat.com/security/cve/CVE-2016-4228 https://access.redhat.com/security/cve/CVE-2016-4229 https://access.redhat.com/security/cve/CVE-2016-4230 https://access.redhat.com/security/cve/CVE-2016-4231 https://access.redhat.com/security/cve/CVE-2016-4232 https://access.redhat.com/security/cve/CVE-2016-4233 https://access.redhat.com/security/cve/CVE-2016-4234 https://access.redhat.com/security/cve/CVE-2016-4235 https://access.redhat.com/security/cve/CVE-2016-4236 https://access.redhat.com/security/cve/CVE-2016-4237 https://access.redhat.com/security/cve/CVE-2016-4238 https://access.redhat.com/security/cve/CVE-2016-4239 https://access.redhat.com/security/cve/CVE-2016-4240 https://access.redhat.com/security/cve/CVE-2016-4241 https://access.redhat.com/security/cve/CVE-2016-4242 https://access.redhat.com/security/cve/CVE-2016-4243 https://access.redhat.com/security/cve/CVE-2016-4244 https://access.redhat.com/security/cve/CVE-2016-4245 https://access.redhat.com/security/cve/CVE-2016-4246 https://access.redhat.com/security/cve/CVE-2016-4247 https://access.redhat.com/security/cve/CVE-2016-4248 https://access.redhat.com/security/cve/CVE-2016-4249 https://access.redhat.com/security/updates/classification/#critical https://helpx.adobe.com/security/products/flash-player/apsb16-25.html
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2016 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iD8DBQFXho6cXlSAg2UNWIIRAp9tAKCwWeHDwGxx4MZRSsZtYsaP7bf+8ACcCmVr 3PPWGTqHtaFvIBLqaCpxcMk= =uyDE -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201607-0103",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "flash player desktop runtime",
"scope": "lte",
"trust": 1.0,
"vendor": "adobe",
"version": "22.0.0.192"
},
{
"model": "flash player",
"scope": "lte",
"trust": 1.0,
"vendor": "adobe",
"version": "18.0.0.360"
},
{
"model": "flash player",
"scope": "lte",
"trust": 1.0,
"vendor": "adobe",
"version": "22.0.0.192"
},
{
"model": "flash player",
"scope": "lte",
"trust": 1.0,
"vendor": "adobe",
"version": "11.2.202.626"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.9,
"vendor": "adobe",
"version": "22.0.0.192"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.9,
"vendor": "adobe",
"version": "11.2.202.626"
},
{
"model": "chrome",
"scope": null,
"trust": 0.8,
"vendor": "google",
"version": null
},
{
"model": "flash player",
"scope": "lt",
"trust": 0.8,
"vendor": "adobe",
"version": "11.2.202.632 (linux)"
},
{
"model": "flash player",
"scope": "lt",
"trust": 0.8,
"vendor": "adobe",
"version": "22.0.0.209 (windows 10/8.1 edition microsoft edge/internet explorer 11)"
},
{
"model": "flash player",
"scope": "lt",
"trust": 0.8,
"vendor": "adobe",
"version": "22.0.0.209 (windows/macintosh/linux/chromeos edition chrome)"
},
{
"model": "flash player",
"scope": "lt",
"trust": 0.8,
"vendor": "adobe",
"version": "desktop runtime 22.0.0.209 (windows/macintosh)"
},
{
"model": "flash player",
"scope": "lt",
"trust": 0.8,
"vendor": "adobe",
"version": "continuous support release 18.0.0.366 (windows/macintosh)"
},
{
"model": "windows 10",
"scope": "eq",
"trust": 0.8,
"vendor": "microsoft",
"version": "for 32-bit systems"
},
{
"model": "windows 10",
"scope": "eq",
"trust": 0.8,
"vendor": "microsoft",
"version": "for x64-based systems"
},
{
"model": "windows 10",
"scope": "eq",
"trust": 0.8,
"vendor": "microsoft",
"version": "version 1511 for 32-bit systems"
},
{
"model": "windows 10",
"scope": "eq",
"trust": 0.8,
"vendor": "microsoft",
"version": "version 1511 for x64-based systems"
},
{
"model": "windows 8.1",
"scope": "eq",
"trust": 0.8,
"vendor": "microsoft",
"version": "for 32-bit systems"
},
{
"model": "windows 8.1",
"scope": "eq",
"trust": 0.8,
"vendor": "microsoft",
"version": "for x64-based systems"
},
{
"model": "windows rt 8.1",
"scope": null,
"trust": 0.8,
"vendor": "microsoft",
"version": null
},
{
"model": "windows server 2012",
"scope": "eq",
"trust": 0.8,
"vendor": "microsoft",
"version": "none"
},
{
"model": "windows server 2012",
"scope": "eq",
"trust": 0.8,
"vendor": "microsoft",
"version": "r2"
},
{
"model": "internet explorer",
"scope": "eq",
"trust": 0.3,
"vendor": "microsoft",
"version": "11"
},
{
"model": "edge",
"scope": "eq",
"trust": 0.3,
"vendor": "microsoft",
"version": "0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "16.0235"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "14.0179"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "14.0177"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "14.0176"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0259"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0252"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0214"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0182"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "12.070"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.7.700275"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.7.700232"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.7.700169"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.6.602105"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.5.502131"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.5.502124"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.5.502118"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.5.50080"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.4.400231"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.3.300271"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.3.300270"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.3.300268"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.3.300265"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.3.300262"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.3.300257"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.3.300250"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.3.300231"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.3.300214"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.20295"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202425"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202418"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202400"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202359"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202350"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202346"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202341"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202297"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202280"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202238"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202236"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202221"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202197"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202160"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.11569"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.11554"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.11164"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.11150"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.0.198"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.0.160"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.0.1129"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.53.64"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.51.66"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.0.452"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.0.3218"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.0.22.87"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.0.15.3"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.0.12.36"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.0.12.35"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.262"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.2460"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.152.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.151.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.124.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.9.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.8.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.48.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.47.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.45.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.31.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.289.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.283.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.280"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.28.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.277.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.262.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.260.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.246.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.159.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.155.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9.0.115.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "9"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "8.0.35.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "8.0.34.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "8"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "7.61"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "7.0.73.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "7.0.70.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "7.0.69.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "7.0.68.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "7.0.67.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "7.0.66.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "7.0.61.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "7.0.60.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "7.0.53.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "7.0.24.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "7.0.19.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "7.0.14.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "7"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "6.0.79"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "6.0.21.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "4"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "3"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "21.0.0.242"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "21.0.0.241"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "21.0.0.226"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "21.0.0.216"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "21.0.0.213"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "21.0.0.197"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "21.0.0.182"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "21.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "20.0.0.306"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "20.0.0.286"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "20.0.0.272"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "20.0.0.267"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "20.0.0.235"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "20.0.0.228"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "2"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "19.0.0.245"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "19.0.0.226"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "19.0.0.207"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "19.0.0.185"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.360"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.352"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.343"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.333"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.329"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.326"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.324"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.268"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.261"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.255"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.252"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.241"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.233"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.232"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.209"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.204"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.203"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.194"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.161"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.160"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.143"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "17.0.0.188"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "17.0.0.169"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "17.0.0.134"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "16.0.0.305"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "16.0.0.296"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "16.0.0.291"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "16.0.0.287"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "16.0.0.257"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "16.0.0.234"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "15.0.0.246"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "15.0.0.242"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "15.0.0.239"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "15.0.0.223"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "15.0.0.189"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "15.0.0.152"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "14.0.0.145"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "14.0.0.125"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.309"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.302"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.296"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.292"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.289"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.281"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.277"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.269"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.264"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.262"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.260"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.258"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.250"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.244"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.241"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.231"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.223"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.206"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "13.0.0.201"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "12.0.0.77"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "12.0.0.44"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "12.0.0.43"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "12.0.0.41"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "12.0.0.38"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "12"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.9.900.170"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.9.900.152"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.9.900.117"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.8.800.97"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.8.800.94"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.8.800.170"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.8.800.168"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.7.700.279"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.7.700.272"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.7.700.269"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.7.700.261"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.7.700.260"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.7.700.257"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.7.700.252"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.7.700.242"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.7.700.225"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.7.700.224"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.7.700.203"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.7.700.202"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.6.602.180"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.6.602.171"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.6.602.168"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.6.602.167"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.5.502.149"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.5.502.146"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.5.502.136"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.5.502.135"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.5.502.110"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.4.402.287"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.4.402.278"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.4.402.265"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.3.378.5"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.3.31.230"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.3.300.273"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.621"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.616"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.577"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.569"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.559"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.554"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.548"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.540"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.535"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.521"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.508"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.491"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.481"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.468"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.466"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.460"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.457"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.451"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.442"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.440"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.438"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.429"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.424"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.411"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.406"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.394"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.378"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.356"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.336"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.335"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.332"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.327"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.310"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.291"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.285"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.275"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.273"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.270"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.262"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.261"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.258"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.251"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.243"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.238"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.235"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.233"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.229"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.228"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.223"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.115.81"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.115.8"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.115.7"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.115.63"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.115.6"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.115.59"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.115.58"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.115.48"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.115.34"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.115.11"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.112.61"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.111.9"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.111.8"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.111.73"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.111.7"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.111.6"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.111.54"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.111.5"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.111.44"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.111.10"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.102.63"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.102.62"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.102.59"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.102.55"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1.102.228"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.1"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.0.1.153"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.0.1.152"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11.0"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "11"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.186.7"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.186.6"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.186.3"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.186.2"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.185.25"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.185.24"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.185.23"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.185.22"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.185.21"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.86"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.75"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.7"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.68"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.67"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.63"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.61"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.51"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.50"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.5"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.48"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.43"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.4"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.29"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.25"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.23"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.20"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.19"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.18"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.16"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.15"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.11"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.183.10"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.181.34"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.181.26"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.181.23"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.181.22"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.181.16"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.3.181.14"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.2.159.1"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.2.157.51"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.2.156.12"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.2.154.28"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.2.154.27"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.2.154.25"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.2.154.24"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.2.154.18"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.2.154.13"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.2.153.1"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.2.152.33"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.2.152.32"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.2.152.26"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.2.152.21"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.2.152"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.95.2"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.95.1"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.92.8"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.92.10"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.85.3"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.82.76"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.52.15"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.52.14.1"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.52.14"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.106.17"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.106.16"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.105.6"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.102.65"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1.102.64"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.1"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.0.42.34"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.0.32.18"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10.0.2.54"
},
{
"model": "flash player",
"scope": "eq",
"trust": 0.3,
"vendor": "adobe",
"version": "10"
},
{
"model": "flash player",
"scope": "ne",
"trust": 0.3,
"vendor": "adobe",
"version": "22.0.0.209"
},
{
"model": "flash player",
"scope": "ne",
"trust": 0.3,
"vendor": "adobe",
"version": "18.0.0.366"
},
{
"model": "flash player",
"scope": "ne",
"trust": 0.3,
"vendor": "adobe",
"version": "11.2.202.632"
}
],
"sources": [
{
"db": "BID",
"id": "91725"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-003656"
},
{
"db": "CNNVD",
"id": "CNNVD-201607-245"
},
{
"db": "NVD",
"id": "CVE-2016-4188"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:google:chrome",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:adobe:flash_player",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:microsoft:windows_10",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:microsoft:windows_8.1",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:microsoft:windows_rt_8.1",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:microsoft:windows_server_2012",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2016-003656"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "willJ of Tencent PC Manager, S\u00e9bastien Morin of COSIG, Yuki Chen of Qihoo 360 Vulcan Team, Wen Guanxing from Pangu LAB, and Jie Zeng of Tencent Zhanlu Lab.",
"sources": [
{
"db": "BID",
"id": "91725"
}
],
"trust": 0.3
},
"cve": "CVE-2016-4188",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "CVE-2016-4188",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.1,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 10.0,
"confidentialityImpact": "Complete",
"exploitabilityScore": null,
"id": "CVE-2016-4188",
"impactScore": null,
"integrityImpact": "Complete",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "VHN-93007",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"id": "CVE-2016-4188",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2016-4188",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2016-4188",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2016-4188",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNNVD",
"id": "CNNVD-201607-245",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-93007",
"trust": 0.1,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2016-4188",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-93007"
},
{
"db": "VULMON",
"id": "CVE-2016-4188"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-003656"
},
{
"db": "CNNVD",
"id": "CNNVD-201607-245"
},
{
"db": "NVD",
"id": "CVE-2016-4188"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246. \nAttackers can exploit these issues to execute arbitrary code in the context of the user running the affected applications. Failed exploit attempts will likely cause a denial-of-service condition. The product enables viewing of applications, content and video across screens and browsers. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n=====================================================================\n Red Hat Security Advisory\n\nSynopsis: Critical: flash-plugin security update\nAdvisory ID: RHSA-2016:1423-01\nProduct: Red Hat Enterprise Linux Supplementary\nAdvisory URL: https://access.redhat.com/errata/RHSA-2016:1423\nIssue date: 2016-07-13\nCVE Names: CVE-2016-4172 CVE-2016-4173 CVE-2016-4174 \n CVE-2016-4175 CVE-2016-4176 CVE-2016-4177 \n CVE-2016-4178 CVE-2016-4179 CVE-2016-4180 \n CVE-2016-4181 CVE-2016-4182 CVE-2016-4183 \n CVE-2016-4184 CVE-2016-4185 CVE-2016-4186 \n CVE-2016-4187 CVE-2016-4188 CVE-2016-4189 \n CVE-2016-4190 CVE-2016-4217 CVE-2016-4218 \n CVE-2016-4219 CVE-2016-4220 CVE-2016-4221 \n CVE-2016-4222 CVE-2016-4223 CVE-2016-4224 \n CVE-2016-4225 CVE-2016-4226 CVE-2016-4227 \n CVE-2016-4228 CVE-2016-4229 CVE-2016-4230 \n CVE-2016-4231 CVE-2016-4232 CVE-2016-4233 \n CVE-2016-4234 CVE-2016-4235 CVE-2016-4236 \n CVE-2016-4237 CVE-2016-4238 CVE-2016-4239 \n CVE-2016-4240 CVE-2016-4241 CVE-2016-4242 \n CVE-2016-4243 CVE-2016-4244 CVE-2016-4245 \n CVE-2016-4246 CVE-2016-4247 CVE-2016-4248 \n CVE-2016-4249 \n=====================================================================\n\n1. Summary:\n\nAn update for flash-plugin is now available for Red Hat Enterprise Linux 5\nSupplementary and Red Hat Enterprise Linux 6 Supplementary. \n\nRed Hat Product Security has rated this update as having a security impact\nof Critical. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64\nRed Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64\nRed Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64\nRed Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64\nRed Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64\n\n3. Description:\n\nThe flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in. \n\nThis update upgrades Flash Player to version 11.2.202.632. These\nvulnerabilities, detailed in the Adobe Security Bulletin listed in the\nReferences section, could allow an attacker to create a specially crafted\nSWF file that would cause flash-plugin to crash, execute arbitrary code, or\ndisclose sensitive information when the victim loaded a page containing the\nmalicious SWF content. (CVE-2016-4172, CVE-2016-4173, CVE-2016-4174,\nCVE-2016-4175, CVE-2016-4176, CVE-2016-4177, CVE-2016-4178, CVE-2016-4179,\nCVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184,\nCVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189,\nCVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220,\nCVE-2016-4221, CVE-2016-4222, CVE-2016-4223, CVE-2016-4224, CVE-2016-4225,\nCVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230,\nCVE-2016-4231, CVE-2016-4232, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235,\nCVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240,\nCVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245,\nCVE-2016-4246, CVE-2016-4247, CVE-2016-4248, CVE-2016-4249)\n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n1355971 - flash-plugin: multiple code execution issues fixed in APSB16-25\n\n6. Package List:\n\nRed Hat Enterprise Linux Desktop Supplementary (v. 5):\n\ni386:\nflash-plugin-11.2.202.632-1.el5_11.i386.rpm\n\nx86_64:\nflash-plugin-11.2.202.632-1.el5_11.i386.rpm\n\nRed Hat Enterprise Linux Server Supplementary (v. 5):\n\ni386:\nflash-plugin-11.2.202.632-1.el5_11.i386.rpm\n\nx86_64:\nflash-plugin-11.2.202.632-1.el5_11.i386.rpm\n\nRed Hat Enterprise Linux Desktop Supplementary (v. 6):\n\ni386:\nflash-plugin-11.2.202.632-1.el6_8.i686.rpm\n\nx86_64:\nflash-plugin-11.2.202.632-1.el6_8.i686.rpm\n\nRed Hat Enterprise Linux Server Supplementary (v. 6):\n\ni386:\nflash-plugin-11.2.202.632-1.el6_8.i686.rpm\n\nx86_64:\nflash-plugin-11.2.202.632-1.el6_8.i686.rpm\n\nRed Hat Enterprise Linux Workstation Supplementary (v. 6):\n\ni386:\nflash-plugin-11.2.202.632-1.el6_8.i686.rpm\n\nx86_64:\nflash-plugin-11.2.202.632-1.el6_8.i686.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2016-4172\nhttps://access.redhat.com/security/cve/CVE-2016-4173\nhttps://access.redhat.com/security/cve/CVE-2016-4174\nhttps://access.redhat.com/security/cve/CVE-2016-4175\nhttps://access.redhat.com/security/cve/CVE-2016-4176\nhttps://access.redhat.com/security/cve/CVE-2016-4177\nhttps://access.redhat.com/security/cve/CVE-2016-4178\nhttps://access.redhat.com/security/cve/CVE-2016-4179\nhttps://access.redhat.com/security/cve/CVE-2016-4180\nhttps://access.redhat.com/security/cve/CVE-2016-4181\nhttps://access.redhat.com/security/cve/CVE-2016-4182\nhttps://access.redhat.com/security/cve/CVE-2016-4183\nhttps://access.redhat.com/security/cve/CVE-2016-4184\nhttps://access.redhat.com/security/cve/CVE-2016-4185\nhttps://access.redhat.com/security/cve/CVE-2016-4186\nhttps://access.redhat.com/security/cve/CVE-2016-4187\nhttps://access.redhat.com/security/cve/CVE-2016-4188\nhttps://access.redhat.com/security/cve/CVE-2016-4189\nhttps://access.redhat.com/security/cve/CVE-2016-4190\nhttps://access.redhat.com/security/cve/CVE-2016-4217\nhttps://access.redhat.com/security/cve/CVE-2016-4218\nhttps://access.redhat.com/security/cve/CVE-2016-4219\nhttps://access.redhat.com/security/cve/CVE-2016-4220\nhttps://access.redhat.com/security/cve/CVE-2016-4221\nhttps://access.redhat.com/security/cve/CVE-2016-4222\nhttps://access.redhat.com/security/cve/CVE-2016-4223\nhttps://access.redhat.com/security/cve/CVE-2016-4224\nhttps://access.redhat.com/security/cve/CVE-2016-4225\nhttps://access.redhat.com/security/cve/CVE-2016-4226\nhttps://access.redhat.com/security/cve/CVE-2016-4227\nhttps://access.redhat.com/security/cve/CVE-2016-4228\nhttps://access.redhat.com/security/cve/CVE-2016-4229\nhttps://access.redhat.com/security/cve/CVE-2016-4230\nhttps://access.redhat.com/security/cve/CVE-2016-4231\nhttps://access.redhat.com/security/cve/CVE-2016-4232\nhttps://access.redhat.com/security/cve/CVE-2016-4233\nhttps://access.redhat.com/security/cve/CVE-2016-4234\nhttps://access.redhat.com/security/cve/CVE-2016-4235\nhttps://access.redhat.com/security/cve/CVE-2016-4236\nhttps://access.redhat.com/security/cve/CVE-2016-4237\nhttps://access.redhat.com/security/cve/CVE-2016-4238\nhttps://access.redhat.com/security/cve/CVE-2016-4239\nhttps://access.redhat.com/security/cve/CVE-2016-4240\nhttps://access.redhat.com/security/cve/CVE-2016-4241\nhttps://access.redhat.com/security/cve/CVE-2016-4242\nhttps://access.redhat.com/security/cve/CVE-2016-4243\nhttps://access.redhat.com/security/cve/CVE-2016-4244\nhttps://access.redhat.com/security/cve/CVE-2016-4245\nhttps://access.redhat.com/security/cve/CVE-2016-4246\nhttps://access.redhat.com/security/cve/CVE-2016-4247\nhttps://access.redhat.com/security/cve/CVE-2016-4248\nhttps://access.redhat.com/security/cve/CVE-2016-4249\nhttps://access.redhat.com/security/updates/classification/#critical\nhttps://helpx.adobe.com/security/products/flash-player/apsb16-25.html\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2016 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n\niD8DBQFXho6cXlSAg2UNWIIRAp9tAKCwWeHDwGxx4MZRSsZtYsaP7bf+8ACcCmVr\n3PPWGTqHtaFvIBLqaCpxcMk=\n=uyDE\n-----END PGP SIGNATURE-----\n\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2016-4188"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-003656"
},
{
"db": "BID",
"id": "91725"
},
{
"db": "VULHUB",
"id": "VHN-93007"
},
{
"db": "VULMON",
"id": "CVE-2016-4188"
},
{
"db": "PACKETSTORM",
"id": "137898"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2016-4188",
"trust": 3.0
},
{
"db": "BID",
"id": "91725",
"trust": 2.1
},
{
"db": "SECTRACK",
"id": "1036280",
"trust": 1.8
},
{
"db": "JVNDB",
"id": "JVNDB-2016-003656",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201607-245",
"trust": 0.7
},
{
"db": "VULHUB",
"id": "VHN-93007",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2016-4188",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "137898",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-93007"
},
{
"db": "VULMON",
"id": "CVE-2016-4188"
},
{
"db": "BID",
"id": "91725"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-003656"
},
{
"db": "PACKETSTORM",
"id": "137898"
},
{
"db": "CNNVD",
"id": "CNNVD-201607-245"
},
{
"db": "NVD",
"id": "CVE-2016-4188"
}
]
},
"id": "VAR-201607-0103",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-93007"
}
],
"trust": 0.01
},
"last_update_date": "2024-11-23T21:42:42.772000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "APSB16-25",
"trust": 0.8,
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
},
{
"title": "APSB16-25",
"trust": 0.8,
"url": "https://helpx.adobe.com/jp/security/products/flash-player/apsb16-25.html"
},
{
"title": "Google Chrome \u3092\u66f4\u65b0\u3059\u308b",
"trust": 0.8,
"url": "https://support.google.com/chrome/answer/95414?hl=ja"
},
{
"title": "Google Chrome",
"trust": 0.8,
"url": "https://www.google.com/intl/ja/chrome/browser/features.html"
},
{
"title": "Chrome Releases",
"trust": 0.8,
"url": "http://googlechromereleases.blogspot.jp/"
},
{
"title": "MS16-093",
"trust": 0.8,
"url": "https://technet.microsoft.com/en-us/library/security/ms16-093.aspx"
},
{
"title": "MS16-093",
"trust": 0.8,
"url": "https://technet.microsoft.com/ja-jp/library/security/MS16-093.aspx"
},
{
"title": "\u30a2\u30c9\u30d3 \u30b7\u30b9\u30c6\u30e0\u30ba\u793e Adobe Flash Player \u306e\u8106\u5f31\u6027\u306b\u95a2\u3059\u308b\u304a\u77e5\u3089\u305b",
"trust": 0.8,
"url": "http://www.fmworld.net/biz/common/adobe/20160714f.html"
},
{
"title": "Adobe Flash Player Repair measures for memory corruption vulnerabilities",
"trust": 0.6,
"url": "http://123.124.177.30/web/xxk/bdxqById.tag?id=62828"
},
{
"title": "Red Hat: CVE-2016-4188",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=CVE-2016-4188"
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4181 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4246 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4184 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4245 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4180 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4182 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4188 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4244 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4185 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4238 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4186 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4221 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4239 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4187 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4234 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4235 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4237 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4236 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4240 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4233 "
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2016-4183 "
},
{
"title": "CVE-Study",
"trust": 0.1,
"url": "https://github.com/thdusdl1219/CVE-Study "
},
{
"title": "BleepingComputer",
"trust": 0.1,
"url": "https://www.bleepingcomputer.com/news/security/adobe-releases-updates-that-resolve-83-security-vulnerabilities/"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2016-4188"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-003656"
},
{
"db": "CNNVD",
"id": "CNNVD-201607-245"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-787",
"trust": 1.1
},
{
"problemtype": "CWE-119",
"trust": 0.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-93007"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-003656"
},
{
"db": "NVD",
"id": "CVE-2016-4188"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.2,
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-25.html"
},
{
"trust": 1.9,
"url": "https://access.redhat.com/errata/rhsa-2016:1423"
},
{
"trust": 1.8,
"url": "http://www.securityfocus.com/bid/91725"
},
{
"trust": 1.8,
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-093"
},
{
"trust": 1.8,
"url": "http://www.securitytracker.com/id/1036280"
},
{
"trust": 1.8,
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00017.html"
},
{
"trust": 1.8,
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00016.html"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-4188"
},
{
"trust": 0.8,
"url": "https://www.ipa.go.jp/security/ciadr/vul/20160713-adobeflashplayer.html"
},
{
"trust": 0.8,
"url": "http://www.jpcert.or.jp/at/2016/at160029.html"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-4188"
},
{
"trust": 0.8,
"url": "http://www.npa.go.jp/cyberpolice/topics/?seq=18710"
},
{
"trust": 0.3,
"url": "https://www.adobe.com/software/flash/about/"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2016-4188"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/787.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4236"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4241"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4173"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4223"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4221"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4187"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4187"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4219"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4220"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/articles/11258"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4181"
},
{
"trust": 0.1,
"url": "https://www.redhat.com/mailman/listinfo/rhsa-announce"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4239"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4177"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4242"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4189"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4244"
},
{
"trust": 0.1,
"url": "https://bugzilla.redhat.com/):"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4218"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4233"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4227"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4238"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4173"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4220"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4245"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4217"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4186"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4180"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4249"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4223"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4231"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4172"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4230"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/team/contact/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4186"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4248"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4222"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4226"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4225"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4174"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4221"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4225"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4175"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4177"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4243"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4180"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4182"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4224"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4178"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4224"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4246"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4234"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4190"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4188"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4219"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4229"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4222"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4182"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4183"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4176"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4232"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4172"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4240"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4185"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4179"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4228"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4247"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4179"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4175"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4178"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4183"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4174"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4218"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4184"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4190"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4185"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4235"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4176"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4217"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/team/key/"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4181"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4184"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-4189"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-4237"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-93007"
},
{
"db": "VULMON",
"id": "CVE-2016-4188"
},
{
"db": "BID",
"id": "91725"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-003656"
},
{
"db": "PACKETSTORM",
"id": "137898"
},
{
"db": "CNNVD",
"id": "CNNVD-201607-245"
},
{
"db": "NVD",
"id": "CVE-2016-4188"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-93007"
},
{
"db": "VULMON",
"id": "CVE-2016-4188"
},
{
"db": "BID",
"id": "91725"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-003656"
},
{
"db": "PACKETSTORM",
"id": "137898"
},
{
"db": "CNNVD",
"id": "CNNVD-201607-245"
},
{
"db": "NVD",
"id": "CVE-2016-4188"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2016-07-13T00:00:00",
"db": "VULHUB",
"id": "VHN-93007"
},
{
"date": "2016-07-13T00:00:00",
"db": "VULMON",
"id": "CVE-2016-4188"
},
{
"date": "2016-07-12T00:00:00",
"db": "BID",
"id": "91725"
},
{
"date": "2016-07-15T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2016-003656"
},
{
"date": "2016-07-13T23:48:58",
"db": "PACKETSTORM",
"id": "137898"
},
{
"date": "2016-07-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201607-245"
},
{
"date": "2016-07-13T01:59:57.833000",
"db": "NVD",
"id": "CVE-2016-4188"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-01-25T00:00:00",
"db": "VULHUB",
"id": "VHN-93007"
},
{
"date": "2023-01-25T00:00:00",
"db": "VULMON",
"id": "CVE-2016-4188"
},
{
"date": "2016-07-12T00:00:00",
"db": "BID",
"id": "91725"
},
{
"date": "2016-07-15T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2016-003656"
},
{
"date": "2023-01-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201607-245"
},
{
"date": "2024-11-21T02:51:35.360000",
"db": "NVD",
"id": "CVE-2016-4188"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201607-245"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Adobe Flash Player Vulnerable to arbitrary code execution",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2016-003656"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201607-245"
}
],
"trust": 0.6
}
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.