Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2016-1019 (GCVE-0-2016-1019)
Vulnerability from cvelistv5
Published
2016-04-07 10:00
Modified
2025-07-30 01:46
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.
References
CISA Known Exploited Vulnerability
Data from the CISA Known Exploited Vulnerabilities Catalog
Date added: 2022-03-03
Due date: 2022-03-24
Required action: The impacted product is end-of-life and should be disconnected if still in use.
Used in ransomware: Known
Notes: https://nvd.nist.gov/vuln/detail/CVE-2016-1019
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T22:38:41.639Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html"
},
{
"name": "GLSA-201606-08",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201606-08"
},
{
"name": "openSUSE-SU-2016:0997",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"name": "SUSE-SU-2016:0990",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html"
},
{
"name": "1035491",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1035491"
},
{
"name": "SUSE-SU-2016:1305",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://blogs.adobe.com/psirt/?p=1330"
},
{
"name": "openSUSE-SU-2016:0987",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html"
},
{
"name": "openSUSE-SU-2016:1306",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html"
},
{
"name": "openSUSE-SU-2016:1157",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html"
},
{
"name": "RHSA-2016:0610",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0610.html"
},
{
"name": "MS16-050",
"tags": [
"vendor-advisory",
"x_refsource_MS",
"x_transferred"
],
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
},
{
"name": "85856",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/85856"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2016-1019",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-04T21:35:51.734086Z",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2022-03-03",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1019"
},
"type": "kev"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-07-30T01:46:39.833Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"timeline": [
{
"lang": "en",
"time": "2022-03-03T00:00:00+00:00",
"value": "CVE-2016-1019 added to CISA KEV"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-04-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-12T19:57:01.000Z",
"orgId": "078d4453-3bcd-4900-85e6-15281da43538",
"shortName": "adobe"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html"
},
{
"name": "GLSA-201606-08",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201606-08"
},
{
"name": "openSUSE-SU-2016:0997",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"name": "SUSE-SU-2016:0990",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html"
},
{
"name": "1035491",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1035491"
},
{
"name": "SUSE-SU-2016:1305",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://blogs.adobe.com/psirt/?p=1330"
},
{
"name": "openSUSE-SU-2016:0987",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html"
},
{
"name": "openSUSE-SU-2016:1306",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html"
},
{
"name": "openSUSE-SU-2016:1157",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html"
},
{
"name": "RHSA-2016:0610",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0610.html"
},
{
"name": "MS16-050",
"tags": [
"vendor-advisory",
"x_refsource_MS"
],
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
},
{
"name": "85856",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/85856"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2016-1019",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html",
"refsource": "MISC",
"url": "https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html"
},
{
"name": "GLSA-201606-08",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201606-08"
},
{
"name": "openSUSE-SU-2016:0997",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html"
},
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"refsource": "CONFIRM",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"name": "SUSE-SU-2016:0990",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html"
},
{
"name": "1035491",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1035491"
},
{
"name": "SUSE-SU-2016:1305",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html"
},
{
"name": "http://blogs.adobe.com/psirt/?p=1330",
"refsource": "CONFIRM",
"url": "http://blogs.adobe.com/psirt/?p=1330"
},
{
"name": "openSUSE-SU-2016:0987",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html"
},
{
"name": "openSUSE-SU-2016:1306",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html"
},
{
"name": "openSUSE-SU-2016:1157",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html"
},
{
"name": "RHSA-2016:0610",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0610.html"
},
{
"name": "MS16-050",
"refsource": "MS",
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050"
},
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"refsource": "CONFIRM",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
},
{
"name": "85856",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/85856"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
"assignerShortName": "adobe",
"cveId": "CVE-2016-1019",
"datePublished": "2016-04-07T10:00:00.000Z",
"dateReserved": "2015-12-22T00:00:00.000Z",
"dateUpdated": "2025-07-30T01:46:39.833Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"cisa_known_exploited": {
"cveID": "CVE-2016-1019",
"dateAdded": "2022-03-03",
"dueDate": "2022-03-24",
"knownRansomwareCampaignUse": "Known",
"notes": "https://nvd.nist.gov/vuln/detail/CVE-2016-1019",
"product": "Flash Player",
"requiredAction": "The impacted product is end-of-life and should be disconnected if still in use.",
"shortDescription": "Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.",
"vendorProject": "Adobe",
"vulnerabilityName": "Adobe Flash Player Arbitrary Code Execution Vulnerability"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2016-1019\",\"sourceIdentifier\":\"psirt@adobe.com\",\"published\":\"2016-04-07T10:59:01.447\",\"lastModified\":\"2025-04-12T10:46:40.837\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.\"},{\"lang\":\"es\",\"value\":\"Adobe Flash Player 21.0.0.197 y versiones anteriores permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda de aplicaci\u00f3n) o posiblemente ejecutar c\u00f3digo arbitrario a trav\u00e9s de vectores no especificados, seg\u00fan se ha explotado activamente en Abril de 2016.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":true,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"cisaExploitAdd\":\"2022-03-03\",\"cisaActionDue\":\"2022-03-24\",\"cisaRequiredAction\":\"The impacted product is end-of-life and should be disconnected if still in use.\",\"cisaVulnerabilityName\":\"Adobe Flash Player Arbitrary Code Execution Vulnerability\",\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"21.0.0.197\",\"matchCriteriaId\":\"EAB15A84-C6CE-4B87-B058-1ACAF56D96A5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*\",\"versionEndIncluding\":\"18.0.0.333\",\"matchCriteriaId\":\"68F6E54E-28D2-460A-9167-8BD0D3283E26\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*\",\"versionEndIncluding\":\"21.0.0.197\",\"matchCriteriaId\":\"9B384454-A4B4-4E57-8B0C-2B7BB8DCC545\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*\",\"versionEndIncluding\":\"21.0.0.197\",\"matchCriteriaId\":\"7B5CCFA5-1620-4BC0-ABC3-10F6CFC2D7FB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21540673-614A-4D40-8BD7-3F07723803B0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*\",\"versionEndIncluding\":\"21.0.0.197\",\"matchCriteriaId\":\"0303DA1C-3C95-4E68-B654-579A302FDF62\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21540673-614A-4D40-8BD7-3F07723803B0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E93068DB-549B-45AB-8E5C-00EB5D8B5CF8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"11.2.202.577\",\"matchCriteriaId\":\"DBB40E98-5A3C-4D4E-BF35-66D8490D6B96\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:air_desktop_runtime:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"21.0.0.176\",\"matchCriteriaId\":\"5C86F836-BD68-4B24-87F0-536D61670256\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"21.0.0.176\",\"matchCriteriaId\":\"B2F4F71D-DA29-43C6-B71F-26F0E1E82619\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5415705-33E5-46D5-8E4D-9EBADC8C5705\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:google:android:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:air_sdk_\\\\\u0026_compiler:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"21.0.0.176\",\"matchCriteriaId\":\"B1EBEC22-8E22-47A6-B3F9-2D577AFE5FA1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5415705-33E5-46D5-8E4D-9EBADC8C5705\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4781BF1E-8A4E-4AFF-9540-23D523EE30DD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:google:android:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2572D17-1DE6-457B-99CC-64AFD54487EA\"}]}]}],\"references\":[{\"url\":\"http://blogs.adobe.com/psirt/?p=1330\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0610.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/85856\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1035491\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Patch\",\"Third Party Advisory\",\"Vendor Advisory\"]},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsa16-01.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb16-10.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201606-08\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://blogs.adobe.com/psirt/?p=1330\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-0610.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/85856\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1035491\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\",\"Vendor Advisory\"]},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsa16-01.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://helpx.adobe.com/security/products/flash-player/apsb16-10.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201606-08\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/201606-08\", \"name\": \"GLSA-201606-08\", \"tags\": [\"vendor-advisory\", \"x_refsource_GENTOO\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html\", \"name\": \"openSUSE-SU-2016:0997\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"https://helpx.adobe.com/security/products/flash-player/apsa16-01.html\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html\", \"name\": \"SUSE-SU-2016:0990\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1035491\", \"name\": \"1035491\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html\", \"name\": \"SUSE-SU-2016:1305\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"http://blogs.adobe.com/psirt/?p=1330\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html\", \"name\": \"openSUSE-SU-2016:0987\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html\", \"name\": \"openSUSE-SU-2016:1306\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html\", \"name\": \"openSUSE-SU-2016:1157\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-0610.html\", \"name\": \"RHSA-2016:0610\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050\", \"name\": \"MS16-050\", \"tags\": [\"vendor-advisory\", \"x_refsource_MS\", \"x_transferred\"]}, {\"url\": \"https://helpx.adobe.com/security/products/flash-player/apsb16-10.html\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"http://www.securityfocus.com/bid/85856\", \"name\": \"85856\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-05T22:38:41.639Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2016-1019\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-02-04T21:35:51.734086Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2022-03-03\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-1019\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"description\": \"CWE-noinfo Not enough information\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-04T21:35:59.002Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"datePublic\": \"2016-04-05T00:00:00.000Z\", \"references\": [{\"url\": \"https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://security.gentoo.org/glsa/201606-08\", \"name\": \"GLSA-201606-08\", \"tags\": [\"vendor-advisory\", \"x_refsource_GENTOO\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html\", \"name\": \"openSUSE-SU-2016:0997\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"https://helpx.adobe.com/security/products/flash-player/apsa16-01.html\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html\", \"name\": \"SUSE-SU-2016:0990\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"http://www.securitytracker.com/id/1035491\", \"name\": \"1035491\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html\", \"name\": \"SUSE-SU-2016:1305\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"http://blogs.adobe.com/psirt/?p=1330\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html\", \"name\": \"openSUSE-SU-2016:0987\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html\", \"name\": \"openSUSE-SU-2016:1306\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html\", \"name\": \"openSUSE-SU-2016:1157\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-0610.html\", \"name\": \"RHSA-2016:0610\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050\", \"name\": \"MS16-050\", \"tags\": [\"vendor-advisory\", \"x_refsource_MS\"]}, {\"url\": \"https://helpx.adobe.com/security/products/flash-player/apsb16-10.html\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"http://www.securityfocus.com/bid/85856\", \"name\": \"85856\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"n/a\"}]}], \"providerMetadata\": {\"orgId\": \"078d4453-3bcd-4900-85e6-15281da43538\", \"shortName\": \"adobe\", \"dateUpdated\": \"2018-10-12T19:57:01.000Z\"}, \"x_legacyV4Record\": {\"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"version_value\": \"n/a\"}]}, \"product_name\": \"n/a\"}]}, \"vendor_name\": \"n/a\"}]}}, \"data_type\": \"CVE\", \"references\": {\"reference_data\": [{\"url\": \"https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html\", \"name\": \"https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://security.gentoo.org/glsa/201606-08\", \"name\": \"GLSA-201606-08\", \"refsource\": \"GENTOO\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html\", \"name\": \"openSUSE-SU-2016:0997\", \"refsource\": \"SUSE\"}, {\"url\": \"https://helpx.adobe.com/security/products/flash-player/apsa16-01.html\", \"name\": \"https://helpx.adobe.com/security/products/flash-player/apsa16-01.html\", \"refsource\": \"CONFIRM\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html\", \"name\": \"SUSE-SU-2016:0990\", \"refsource\": \"SUSE\"}, {\"url\": \"http://www.securitytracker.com/id/1035491\", \"name\": \"1035491\", \"refsource\": \"SECTRACK\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html\", \"name\": \"SUSE-SU-2016:1305\", \"refsource\": \"SUSE\"}, {\"url\": \"http://blogs.adobe.com/psirt/?p=1330\", \"name\": \"http://blogs.adobe.com/psirt/?p=1330\", \"refsource\": \"CONFIRM\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html\", \"name\": \"openSUSE-SU-2016:0987\", \"refsource\": \"SUSE\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html\", \"name\": \"openSUSE-SU-2016:1306\", \"refsource\": \"SUSE\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html\", \"name\": \"openSUSE-SU-2016:1157\", \"refsource\": \"SUSE\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-0610.html\", \"name\": \"RHSA-2016:0610\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050\", \"name\": \"MS16-050\", \"refsource\": \"MS\"}, {\"url\": \"https://helpx.adobe.com/security/products/flash-player/apsb16-10.html\", \"name\": \"https://helpx.adobe.com/security/products/flash-player/apsb16-10.html\", \"refsource\": \"CONFIRM\"}, {\"url\": \"http://www.securityfocus.com/bid/85856\", \"name\": \"85856\", \"refsource\": \"BID\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"n/a\"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2016-1019\", \"STATE\": \"PUBLIC\", \"ASSIGNER\": \"psirt@adobe.com\"}}}}",
"cveMetadata": "{\"cveId\": \"CVE-2016-1019\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-02-04T21:45:17.422Z\", \"dateReserved\": \"2015-12-22T00:00:00.000Z\", \"assignerOrgId\": \"078d4453-3bcd-4900-85e6-15281da43538\", \"datePublished\": \"2016-04-07T10:00:00.000Z\", \"assignerShortName\": \"adobe\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
CERTFR-2017-AVI-134
Vulnerability from certfr_avis
De multiples vulnérabilités ont été corrigées dans Mozilla Thunderbird. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Thunderbird versions antérieures à 52.1
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eThunderbird versions ant\u00e9rieures \u00e0 52.1\u003c/P\u003e",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2017-5436",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5436"
},
{
"name": "CVE-2016-1019",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1019"
},
{
"name": "CVE-2017-5440",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5440"
},
{
"name": "CVE-2017-5459",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5459"
},
{
"name": "CVE-2017-5429",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5429"
},
{
"name": "CVE-2017-5467",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5467"
},
{
"name": "CVE-2017-5462",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5462"
},
{
"name": "CVE-2017-5444",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5444"
},
{
"name": "CVE-2017-5451",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5451"
},
{
"name": "CVE-2017-5466",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5466"
},
{
"name": "CVE-2017-5447",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5447"
},
{
"name": "CVE-2017-5469",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5469"
},
{
"name": "CVE-2017-5443",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5443"
},
{
"name": "CVE-2017-5442",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5442"
},
{
"name": "CVE-2017-5432",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5432"
},
{
"name": "CVE-2017-5465",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5465"
},
{
"name": "CVE-2017-5439",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5439"
},
{
"name": "CVE-2017-5441",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5441"
},
{
"name": "CVE-2017-5464",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5464"
},
{
"name": "CVE-2017-5434",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5434"
},
{
"name": "CVE-2017-5430",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5430"
},
{
"name": "CVE-2017-5445",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5445"
},
{
"name": "CVE-2017-5438",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5438"
},
{
"name": "CVE-2017-5460",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5460"
},
{
"name": "CVE-2017-5454",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5454"
},
{
"name": "CVE-2017-5449",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5449"
},
{
"name": "CVE-2017-5435",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5435"
},
{
"name": "CVE-2017-5433",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5433"
},
{
"name": "CVE-2017-5446",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5446"
},
{
"name": "CVE-2017-5461",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5461"
}
],
"initial_release_date": "2017-05-02T00:00:00",
"last_revision_date": "2017-05-02T00:00:00",
"links": [],
"reference": "CERTFR-2017-AVI-134",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2017-05-02T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMozilla Thunderbird\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et un contournement de la\npolitique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Thunderbird",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2017-13 du 30 avril 2017",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-13/"
}
]
}
CERTFR-2016-AVI-121
Vulnerability from certfr_avis
De multiples vulnérabilités ont été corrigées dans Microsoft Edge. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une élévation de privilèges.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Edge pour Windows 10",
"product": {
"name": "Edge",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Microsoft Edge",
"product": {
"name": "Edge",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2016-1019",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1019"
},
{
"name": "CVE-2016-1017",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1017"
},
{
"name": "CVE-2016-1015",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1015"
},
{
"name": "CVE-2016-1018",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1018"
},
{
"name": "CVE-2016-1006",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1006"
},
{
"name": "CVE-2016-0161",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0161"
},
{
"name": "CVE-2016-1012",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1012"
},
{
"name": "CVE-2016-0156",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0156"
},
{
"name": "CVE-2016-1014",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1014"
},
{
"name": "CVE-2016-0155",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0155"
},
{
"name": "CVE-2016-0158",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0158"
},
{
"name": "CVE-2016-1016",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1016"
},
{
"name": "CVE-2016-1013",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1013"
},
{
"name": "CVE-2016-0154",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0154"
},
{
"name": "CVE-2016-1011",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1011"
},
{
"name": "CVE-2016-0157",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0157"
}
],
"initial_release_date": "2016-04-13T00:00:00",
"last_revision_date": "2016-04-13T00:00:00",
"links": [],
"reference": "CERTFR-2016-AVI-121",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2016-04-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Edge\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance et une \u00e9l\u00e9vation\nde privil\u00e8ges.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS16-050 du 12 avril 2016",
"url": "https://technet.microsoft.com/fr-fr/library/security/ms16-050"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS16-038 du 12 avril 2016",
"url": "https://technet.microsoft.com/fr-fr/library/security/ms16-038"
}
]
}
CERTFR-2017-AVI-126
Vulnerability from certfr_avis
De multiples vulnérabilités ont été corrigées dans Mozilla Firefox. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Firefox versions ant\u00e9rieures \u00e0 53",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions 45.x ant\u00e9rieures \u00e0 45.9",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Firefox ESR versions 52.x ant\u00e9rieures \u00e0 52.1",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2017-5436",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5436"
},
{
"name": "CVE-2016-1019",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1019"
},
{
"name": "CVE-2017-5440",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5440"
},
{
"name": "CVE-2017-5437",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5437"
},
{
"name": "CVE-2017-5459",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5459"
},
{
"name": "CVE-2017-5429",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5429"
},
{
"name": "CVE-2017-5467",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5467"
},
{
"name": "CVE-2017-5462",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5462"
},
{
"name": "CVE-2017-5444",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5444"
},
{
"name": "CVE-2017-5451",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5451"
},
{
"name": "CVE-2017-5458",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5458"
},
{
"name": "CVE-2017-5466",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5466"
},
{
"name": "CVE-2017-5447",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5447"
},
{
"name": "CVE-2017-5463",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5463"
},
{
"name": "CVE-2017-5469",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5469"
},
{
"name": "CVE-2017-5456",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5456"
},
{
"name": "CVE-2017-5453",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5453"
},
{
"name": "CVE-2017-5443",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5443"
},
{
"name": "CVE-2017-5442",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5442"
},
{
"name": "CVE-2017-5452",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5452"
},
{
"name": "CVE-2017-5432",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5432"
},
{
"name": "CVE-2017-5465",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5465"
},
{
"name": "CVE-2016-6354",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-6354"
},
{
"name": "CVE-2017-5439",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5439"
},
{
"name": "CVE-2017-5441",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5441"
},
{
"name": "CVE-2017-5464",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5464"
},
{
"name": "CVE-2017-5448",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5448"
},
{
"name": "CVE-2017-5434",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5434"
},
{
"name": "CVE-2017-5430",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5430"
},
{
"name": "CVE-2017-5445",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5445"
},
{
"name": "CVE-2017-5438",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5438"
},
{
"name": "CVE-2017-5460",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5460"
},
{
"name": "CVE-2017-5455",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5455"
},
{
"name": "CVE-2017-5454",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5454"
},
{
"name": "CVE-2017-5449",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5449"
},
{
"name": "CVE-2017-5435",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5435"
},
{
"name": "CVE-2017-5433",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5433"
},
{
"name": "CVE-2017-5446",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5446"
},
{
"name": "CVE-2017-5461",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5461"
},
{
"name": "CVE-2017-5450",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5450"
},
{
"name": "CVE-2017-5468",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5468"
}
],
"initial_release_date": "2017-04-20T00:00:00",
"last_revision_date": "2017-04-20T00:00:00",
"links": [],
"reference": "CERTFR-2017-AVI-126",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2017-04-20T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMozilla Firefox\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un contournement de la politique de s\u00e9curit\u00e9 et une atteinte\n\u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Firefox",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2017-12 du 19 avril 2017",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-12/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2017-10 du 19 avril 2017",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-10/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2017-11 du 19 avril 2017",
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/"
}
]
}
CERTFR-2016-AVI-116
Vulnerability from certfr_avis
De multiples vulnérabilités ont été corrigées dans Adobe Flash Player. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | N/A | Adobe Flash Player versions antérieures à 11.2.202.616 sur Linux | ||
| Adobe | N/A | Adobe Flash Player pour Google Chrome versions antérieures à 21.0.0.213 sur Windows, Macintosh, Linux et ChromeOS | ||
| Adobe | N/A | Adobe AIR SDK & Compiler versions antérieures à 21.0.0.198 sur Windows, Macintosh, Android et iOS | ||
| Adobe | N/A | Adobe AIR Desktop Runtime versions antérieures à 21.0.0.198 sur Windows et Macintosh | ||
| Adobe | N/A | Adobe Flash Player ESR versions antérieures à 18.0.0.343 sur Windows et Macintosh | ||
| Adobe | N/A | Adobe Flash Player pour Internet Explorer 11 versions antérieures à 21.0.0.213 sur Windows 8.1 | ||
| Adobe | N/A | Adobe Flash Player Desktop Runtime versions antérieures à 21.0.0.213 sur Windows et Macintosh | ||
| Adobe | N/A | Adobe AIR SDK versions antérieures à 21.0.0.198 sur Windows, Macintosh, Android et iOS | ||
| Adobe | N/A | Adobe Flash Player pour Microsoft Edge et Internet Explorer 11 versions antérieures à 21.0.0.213 sur Windows 10 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Flash Player versions ant\u00e9rieures \u00e0 11.2.202.616 sur Linux",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Google Chrome versions ant\u00e9rieures \u00e0 21.0.0.213 sur Windows, Macintosh, Linux et ChromeOS",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe AIR SDK \u0026 Compiler versions ant\u00e9rieures \u00e0 21.0.0.198 sur Windows, Macintosh, Android et iOS",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe AIR Desktop Runtime versions ant\u00e9rieures \u00e0 21.0.0.198 sur Windows et Macintosh",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player ESR versions ant\u00e9rieures \u00e0 18.0.0.343 sur Windows et Macintosh",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Internet Explorer 11 versions ant\u00e9rieures \u00e0 21.0.0.213 sur Windows 8.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player Desktop Runtime versions ant\u00e9rieures \u00e0 21.0.0.213 sur Windows et Macintosh",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe AIR SDK versions ant\u00e9rieures \u00e0 21.0.0.198 sur Windows, Macintosh, Android et iOS",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Microsoft Edge et Internet Explorer 11 versions ant\u00e9rieures \u00e0 21.0.0.213 sur Windows 10",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2016-1025",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1025"
},
{
"name": "CVE-2016-1019",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1019"
},
{
"name": "CVE-2016-1032",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1032"
},
{
"name": "CVE-2016-1017",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1017"
},
{
"name": "CVE-2016-1022",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1022"
},
{
"name": "CVE-2016-1021",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1021"
},
{
"name": "CVE-2016-1026",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1026"
},
{
"name": "CVE-2016-1015",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1015"
},
{
"name": "CVE-2016-1031",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1031"
},
{
"name": "CVE-2016-1028",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1028"
},
{
"name": "CVE-2016-1018",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1018"
},
{
"name": "CVE-2016-1006",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1006"
},
{
"name": "CVE-2016-1027",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1027"
},
{
"name": "CVE-2016-1029",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1029"
},
{
"name": "CVE-2016-1012",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1012"
},
{
"name": "CVE-2016-1020",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1020"
},
{
"name": "CVE-2016-1030",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1030"
},
{
"name": "CVE-2016-1033",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1033"
},
{
"name": "CVE-2016-1014",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1014"
},
{
"name": "CVE-2016-1024",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1024"
},
{
"name": "CVE-2016-1023",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1023"
},
{
"name": "CVE-2016-1016",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1016"
},
{
"name": "CVE-2016-1013",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1013"
},
{
"name": "CVE-2016-1011",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1011"
}
],
"initial_release_date": "2016-04-08T00:00:00",
"last_revision_date": "2016-04-13T00:00:00",
"links": [],
"reference": "CERTFR-2016-AVI-116",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2016-04-08T00:00:00.000000"
},
{
"description": "ajout des versions AIR aux Syst\u00e8mes affect\u00e9s suite \u00e0 la mise \u00e0 jour de l\u0027avis de s\u00e9curit\u00e9 d\u0027Adobe en date du 12 avril 2016",
"revision_date": "2016-04-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eAdobe Flash Player\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et un\ncontournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Adobe Flash Player",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB16-10 du 07 avril 2016",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
]
}
CERTFR-2016-AVI-120
Vulnerability from certfr_avis
De multiples vulnérabilités ont été corrigées dans Microsoft Internet Explorer. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Internet Explorer 9",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Internet Explorer 10",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Adobe Flash Player pour Internet Explorer 10 et 11",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Internet Explorer 11",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2016-0164",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0164"
},
{
"name": "CVE-2016-1019",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1019"
},
{
"name": "CVE-2016-0159",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0159"
},
{
"name": "CVE-2016-1017",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1017"
},
{
"name": "CVE-2016-1015",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1015"
},
{
"name": "CVE-2016-0160",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0160"
},
{
"name": "CVE-2016-1018",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1018"
},
{
"name": "CVE-2016-1006",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1006"
},
{
"name": "CVE-2016-1012",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1012"
},
{
"name": "CVE-2016-1014",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1014"
},
{
"name": "CVE-2016-0162",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0162"
},
{
"name": "CVE-2016-1016",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1016"
},
{
"name": "CVE-2016-1013",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1013"
},
{
"name": "CVE-2016-0166",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0166"
},
{
"name": "CVE-2016-0154",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0154"
},
{
"name": "CVE-2016-1011",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1011"
}
],
"initial_release_date": "2016-04-13T00:00:00",
"last_revision_date": "2016-04-13T00:00:00",
"links": [],
"reference": "CERTFR-2016-AVI-120",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2016-04-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Internet Explorer\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et\nune atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Internet Explorer",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS16-050 du 12 avril 2016",
"url": "https://technet.microsoft.com/fr-fr/library/security/ms16-050"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS16-037 du 12 avril 2016",
"url": "https://technet.microsoft.com/fr-fr/library/security/ms16-037"
}
]
}
gsd-2016-1019
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2016-1019",
"description": "Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.",
"id": "GSD-2016-1019",
"references": [
"https://www.suse.com/security/cve/CVE-2016-1019.html",
"https://access.redhat.com/errata/RHSA-2016:0610",
"https://advisories.mageia.org/CVE-2016-1019.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2016-1019"
],
"details": "Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.",
"id": "GSD-2016-1019",
"modified": "2023-12-13T01:21:24.274497Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cisa.gov": {
"cveID": "CVE-2016-1019",
"dateAdded": "2022-03-03",
"dueDate": "2022-03-24",
"product": "Flash Player",
"requiredAction": "Apply updates per vendor instructions.",
"shortDescription": "Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.",
"vendorProject": "Adobe",
"vulnerabilityName": "Adobe Flash Player Arbitrary Code Execution Vulnerability"
},
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2016-1019",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html",
"refsource": "MISC",
"url": "https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html"
},
{
"name": "GLSA-201606-08",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201606-08"
},
{
"name": "openSUSE-SU-2016:0997",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html"
},
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"refsource": "CONFIRM",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"name": "SUSE-SU-2016:0990",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html"
},
{
"name": "1035491",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1035491"
},
{
"name": "SUSE-SU-2016:1305",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html"
},
{
"name": "http://blogs.adobe.com/psirt/?p=1330",
"refsource": "CONFIRM",
"url": "http://blogs.adobe.com/psirt/?p=1330"
},
{
"name": "openSUSE-SU-2016:0987",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html"
},
{
"name": "openSUSE-SU-2016:1306",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html"
},
{
"name": "openSUSE-SU-2016:1157",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html"
},
{
"name": "RHSA-2016:0610",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0610.html"
},
{
"name": "MS16-050",
"refsource": "MS",
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050"
},
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"refsource": "CONFIRM",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
},
{
"name": "85856",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/85856"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "21.0.0.197",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*",
"cpe_name": [],
"versionEndIncluding": "18.0.0.333",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
"cpe_name": [],
"versionEndIncluding": "21.0.0.197",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
"cpe_name": [],
"versionEndIncluding": "21.0.0.197",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
"cpe_name": [],
"versionEndIncluding": "21.0.0.197",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "11.2.202.577",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:air_desktop_runtime:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "21.0.0.176",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "21.0.0.176",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:adobe:air_sdk_\\\u0026_compiler:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "21.0.0.176",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "psirt@adobe.com",
"ID": "CVE-2016-1019"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"refsource": "CONFIRM",
"tags": [
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"name": "http://blogs.adobe.com/psirt/?p=1330",
"refsource": "CONFIRM",
"tags": [
"Broken Link",
"Vendor Advisory"
],
"url": "http://blogs.adobe.com/psirt/?p=1330"
},
{
"name": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"refsource": "CONFIRM",
"tags": [
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
},
{
"name": "GLSA-201606-08",
"refsource": "GENTOO",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/201606-08"
},
{
"name": "RHSA-2016:0610",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0610.html"
},
{
"name": "SUSE-SU-2016:1305",
"refsource": "SUSE",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html"
},
{
"name": "openSUSE-SU-2016:1306",
"refsource": "SUSE",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html"
},
{
"name": "openSUSE-SU-2016:1157",
"refsource": "SUSE",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html"
},
{
"name": "SUSE-SU-2016:0990",
"refsource": "SUSE",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html"
},
{
"name": "openSUSE-SU-2016:0997",
"refsource": "SUSE",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html"
},
{
"name": "1035491",
"refsource": "SECTRACK",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1035491"
},
{
"name": "openSUSE-SU-2016:0987",
"refsource": "SUSE",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html"
},
{
"name": "https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html",
"refsource": "MISC",
"tags": [
"Broken Link"
],
"url": "https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html"
},
{
"name": "85856",
"refsource": "BID",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/85856"
},
{
"name": "MS16-050",
"refsource": "MS",
"tags": [
"Patch",
"Third Party Advisory",
"Vendor Advisory"
],
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": true,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
},
"lastModifiedDate": "2022-11-10T20:10Z",
"publishedDate": "2016-04-07T10:59Z"
}
}
}
suse-su-2016:0990-1
Vulnerability from csaf_suse
Published
2016-04-08 11:31
Modified
2016-04-08 11:31
Summary
Security update for flash-player
Notes
Title of the patch
Security update for flash-player
Description of the patch
flash-player was updated to fix one security issue.
This security issue was fixed:
- CVE-2016-1019: Adobe Flash Player allowed remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016 (bsc#974209).
Patchnames
SUSE-SLE-DESKTOP-12-2016-582,SUSE-SLE-DESKTOP-12-SP1-2016-582,SUSE-SLE-WE-12-2016-582,SUSE-SLE-WE-12-SP1-2016-582
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for flash-player",
"title": "Title of the patch"
},
{
"category": "description",
"text": "flash-player was updated to fix one security issue.\n\nThis security issue was fixed:\n- CVE-2016-1019: Adobe Flash Player allowed remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016 (bsc#974209).\n ",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-2016-582,SUSE-SLE-DESKTOP-12-SP1-2016-582,SUSE-SLE-WE-12-2016-582,SUSE-SLE-WE-12-SP1-2016-582",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_0990-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:0990-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160990-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:0990-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-April/001992.html"
},
{
"category": "self",
"summary": "SUSE Bug 974209",
"url": "https://bugzilla.suse.com/974209"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1019 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1019/"
}
],
"title": "Security update for flash-player",
"tracking": {
"current_release_date": "2016-04-08T11:31:41Z",
"generator": {
"date": "2016-04-08T11:31:41Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:0990-1",
"initial_release_date": "2016-04-08T11:31:41Z",
"revision_history": [
{
"date": "2016-04-08T11:31:41Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "flash-player-11.2.202.616-126.1.x86_64",
"product": {
"name": "flash-player-11.2.202.616-126.1.x86_64",
"product_id": "flash-player-11.2.202.616-126.1.x86_64"
}
},
{
"category": "product_version",
"name": "flash-player-gnome-11.2.202.616-126.1.x86_64",
"product": {
"name": "flash-player-gnome-11.2.202.616-126.1.x86_64",
"product_id": "flash-player-gnome-11.2.202.616-126.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12",
"product": {
"name": "SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 12",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 12",
"product_id": "SUSE Linux Enterprise Workstation Extension 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-11.2.202.616-126.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.616-126.1.x86_64"
},
"product_reference": "flash-player-11.2.202.616-126.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-gnome-11.2.202.616-126.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.616-126.1.x86_64"
},
"product_reference": "flash-player-gnome-11.2.202.616-126.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-11.2.202.616-126.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.616-126.1.x86_64"
},
"product_reference": "flash-player-11.2.202.616-126.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-gnome-11.2.202.616-126.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.616-126.1.x86_64"
},
"product_reference": "flash-player-gnome-11.2.202.616-126.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-11.2.202.616-126.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12",
"product_id": "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.616-126.1.x86_64"
},
"product_reference": "flash-player-11.2.202.616-126.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-gnome-11.2.202.616-126.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12",
"product_id": "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.616-126.1.x86_64"
},
"product_reference": "flash-player-gnome-11.2.202.616-126.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-11.2.202.616-126.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.616-126.1.x86_64"
},
"product_reference": "flash-player-11.2.202.616-126.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-gnome-11.2.202.616-126.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.616-126.1.x86_64"
},
"product_reference": "flash-player-gnome-11.2.202.616-126.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-1019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1019"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.616-126.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1019",
"url": "https://www.suse.com/security/cve/CVE-2016-1019"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1019",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.616-126.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.616-126.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.616-126.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-08T11:31:41Z",
"details": "important"
}
],
"title": "CVE-2016-1019"
}
]
}
suse-su-2016:1305-1
Vulnerability from csaf_suse
Published
2016-05-16 12:14
Modified
2016-05-16 12:14
Summary
Security update for flash-player
Notes
Title of the patch
Security update for flash-player
Description of the patch
This update for flash-player fixes the following issues:
- Security update to 11.2.202.621 (bsc#979422):
* APSA16-02, APSB16-15, CVE-2016-1096, CVE-2016-1097,
CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1101,
CVE-2016-1102, CVE-2016-1103, CVE-2016-1104, CVE-2016-1105,
CVE-2016-1106, CVE-2016-1107, CVE-2016-1108, CVE-2016-1109,
CVE-2016-1110, CVE-2016-4108, CVE-2016-4109, CVE-2016-4110,
CVE-2016-4111, CVE-2016-4112, CVE-2016-4113, CVE-2016-4114,
CVE-2016-4115, CVE-2016-4116, CVE-2016-4117
- The following CVEs got fixed during the previous release, but
got published afterwards:
* APSA16-01, APSB16-10, CVE-2016-1006, CVE-2016-1011,
CVE-2016-1012, CVE-2016-1013, CVE-2016-1014, CVE-2016-1015,
CVE-2016-1016, CVE-2016-1017, CVE-2016-1018, CVE-2016-1019,
CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023,
CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027,
CVE-2016-1028, CVE-2016-1029, CVE-2016-1030, CVE-2016-1031,
CVE-2016-1032, CVE-2016-1033
Patchnames
SUSE-SLE-DESKTOP-12-2016-772,SUSE-SLE-DESKTOP-12-SP1-2016-772,SUSE-SLE-WE-12-2016-772,SUSE-SLE-WE-12-SP1-2016-772
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for flash-player",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for flash-player fixes the following issues: \n\n- Security update to 11.2.202.621 (bsc#979422):\n * APSA16-02, APSB16-15, CVE-2016-1096, CVE-2016-1097,\n CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1101,\n CVE-2016-1102, CVE-2016-1103, CVE-2016-1104, CVE-2016-1105,\n CVE-2016-1106, CVE-2016-1107, CVE-2016-1108, CVE-2016-1109,\n CVE-2016-1110, CVE-2016-4108, CVE-2016-4109, CVE-2016-4110,\n CVE-2016-4111, CVE-2016-4112, CVE-2016-4113, CVE-2016-4114,\n CVE-2016-4115, CVE-2016-4116, CVE-2016-4117\n\n- The following CVEs got fixed during the previous release, but\n got published afterwards:\n * APSA16-01, APSB16-10, CVE-2016-1006, CVE-2016-1011,\n CVE-2016-1012, CVE-2016-1013, CVE-2016-1014, CVE-2016-1015,\n CVE-2016-1016, CVE-2016-1017, CVE-2016-1018, CVE-2016-1019,\n CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023,\n CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027,\n CVE-2016-1028, CVE-2016-1029, CVE-2016-1030, CVE-2016-1031,\n CVE-2016-1032, CVE-2016-1033",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-2016-772,SUSE-SLE-DESKTOP-12-SP1-2016-772,SUSE-SLE-WE-12-2016-772,SUSE-SLE-WE-12-SP1-2016-772",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1305-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:1305-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:1305-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-May/002062.html"
},
{
"category": "self",
"summary": "SUSE Bug 979422",
"url": "https://bugzilla.suse.com/979422"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1006 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1006/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1011 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1012 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1012/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1013 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1013/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1014 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1014/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1015 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1015/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1016 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1017 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1017/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1018 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1019 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1020 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1021 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1022 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1022/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1023 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1023/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1024 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1024/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1025 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1025/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1026 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1026/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1027 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1027/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1028 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1028/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1029 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1029/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1030 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1030/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1031 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1031/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1032 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1032/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1033 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1033/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1096 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1096/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1097 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1097/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1098 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1098/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1099 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1099/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1100 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1100/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1101 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1101/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1102 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1102/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1103 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1104 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1104/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1105 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1105/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1106 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1107 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1107/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1108 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1108/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1109 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1109/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1110 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4108 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4108/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4109 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4109/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4110 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4111 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4112 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4112/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4113 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4114 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4114/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4115 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4115/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4116 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4116/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4117 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4117/"
}
],
"title": "Security update for flash-player",
"tracking": {
"current_release_date": "2016-05-16T12:14:28Z",
"generator": {
"date": "2016-05-16T12:14:28Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:1305-1",
"initial_release_date": "2016-05-16T12:14:28Z",
"revision_history": [
{
"date": "2016-05-16T12:14:28Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "flash-player-11.2.202.621-130.1.x86_64",
"product": {
"name": "flash-player-11.2.202.621-130.1.x86_64",
"product_id": "flash-player-11.2.202.621-130.1.x86_64"
}
},
{
"category": "product_version",
"name": "flash-player-gnome-11.2.202.621-130.1.x86_64",
"product": {
"name": "flash-player-gnome-11.2.202.621-130.1.x86_64",
"product_id": "flash-player-gnome-11.2.202.621-130.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12",
"product": {
"name": "SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 12",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 12",
"product_id": "SUSE Linux Enterprise Workstation Extension 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Workstation Extension 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-we:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-11.2.202.621-130.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64"
},
"product_reference": "flash-player-11.2.202.621-130.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-gnome-11.2.202.621-130.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
},
"product_reference": "flash-player-gnome-11.2.202.621-130.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-11.2.202.621-130.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64"
},
"product_reference": "flash-player-11.2.202.621-130.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-gnome-11.2.202.621-130.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64"
},
"product_reference": "flash-player-gnome-11.2.202.621-130.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-11.2.202.621-130.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12",
"product_id": "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64"
},
"product_reference": "flash-player-11.2.202.621-130.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-gnome-11.2.202.621-130.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12",
"product_id": "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
},
"product_reference": "flash-player-gnome-11.2.202.621-130.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-11.2.202.621-130.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64"
},
"product_reference": "flash-player-11.2.202.621-130.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-player-gnome-11.2.202.621-130.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 12 SP1",
"product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64"
},
"product_reference": "flash-player-gnome-11.2.202.621-130.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-1006",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1006"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass the ASLR protection mechanism via JIT data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1006",
"url": "https://www.suse.com/security/cve/CVE-2016-1006"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1006",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1006"
},
{
"cve": "CVE-2016-1011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1011"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1013, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1011",
"url": "https://www.suse.com/security/cve/CVE-2016-1011"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1011",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1011"
},
{
"cve": "CVE-2016-1012",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1012"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1012",
"url": "https://www.suse.com/security/cve/CVE-2016-1012"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1012",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1012"
},
{
"cve": "CVE-2016-1013",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1013"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1013",
"url": "https://www.suse.com/security/cve/CVE-2016-1013"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1013",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1013"
},
{
"cve": "CVE-2016-1014",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1014"
}
],
"notes": [
{
"category": "general",
"text": "Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows local users to gain privileges via a Trojan horse resource in an unspecified directory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1014",
"url": "https://www.suse.com/security/cve/CVE-2016-1014"
},
{
"category": "external",
"summary": "SUSE Bug 1020381 for CVE-2016-1014",
"url": "https://bugzilla.suse.com/1020381"
},
{
"category": "external",
"summary": "SUSE Bug 1020429 for CVE-2016-1014",
"url": "https://bugzilla.suse.com/1020429"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1014",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1014"
},
{
"cve": "CVE-2016-1015",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1015"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code by overriding NetConnection object properties to leverage an unspecified \"type confusion,\" a different vulnerability than CVE-2016-1019.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1015",
"url": "https://www.suse.com/security/cve/CVE-2016-1015"
},
{
"category": "external",
"summary": "SUSE Bug 1021129 for CVE-2016-1015",
"url": "https://bugzilla.suse.com/1021129"
},
{
"category": "external",
"summary": "SUSE Bug 1024183 for CVE-2016-1015",
"url": "https://bugzilla.suse.com/1024183"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1015",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1015"
},
{
"cve": "CVE-2016-1016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1016"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1017, and CVE-2016-1031.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1016",
"url": "https://www.suse.com/security/cve/CVE-2016-1016"
},
{
"category": "external",
"summary": "SUSE Bug 1021364 for CVE-2016-1016",
"url": "https://bugzilla.suse.com/1021364"
},
{
"category": "external",
"summary": "SUSE Bug 1021616 for CVE-2016-1016",
"url": "https://bugzilla.suse.com/1021616"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1016",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1016"
},
{
"cve": "CVE-2016-1017",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1017"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, and CVE-2016-1031.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1017",
"url": "https://www.suse.com/security/cve/CVE-2016-1017"
},
{
"category": "external",
"summary": "SUSE Bug 1021740 for CVE-2016-1017",
"url": "https://bugzilla.suse.com/1021740"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1017",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1017"
},
{
"cve": "CVE-2016-1018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1018"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via crafted JPEG-XR data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1018",
"url": "https://www.suse.com/security/cve/CVE-2016-1018"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1018",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1018"
},
{
"cve": "CVE-2016-1019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1019"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1019",
"url": "https://www.suse.com/security/cve/CVE-2016-1019"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1019",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1019"
},
{
"cve": "CVE-2016-1020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1020"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1020",
"url": "https://www.suse.com/security/cve/CVE-2016-1020"
},
{
"category": "external",
"summary": "SUSE Bug 1023377 for CVE-2016-1020",
"url": "https://bugzilla.suse.com/1023377"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1020",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1020"
},
{
"cve": "CVE-2016-1021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1021"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1021",
"url": "https://www.suse.com/security/cve/CVE-2016-1021"
},
{
"category": "external",
"summary": "SUSE Bug 1024244 for CVE-2016-1021",
"url": "https://bugzilla.suse.com/1024244"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1021",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1021"
},
{
"cve": "CVE-2016-1022",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1022"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1022",
"url": "https://www.suse.com/security/cve/CVE-2016-1022"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1022",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1022"
},
{
"cve": "CVE-2016-1023",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1023"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1023",
"url": "https://www.suse.com/security/cve/CVE-2016-1023"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1023",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1023"
},
{
"cve": "CVE-2016-1024",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1024"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1024",
"url": "https://www.suse.com/security/cve/CVE-2016-1024"
},
{
"category": "external",
"summary": "SUSE Bug 1029704 for CVE-2016-1024",
"url": "https://bugzilla.suse.com/1029704"
},
{
"category": "external",
"summary": "SUSE Bug 1029705 for CVE-2016-1024",
"url": "https://bugzilla.suse.com/1029705"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1024",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1024"
},
{
"cve": "CVE-2016-1025",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1025"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1025",
"url": "https://www.suse.com/security/cve/CVE-2016-1025"
},
{
"category": "external",
"summary": "SUSE Bug 1006836 for CVE-2016-1025",
"url": "https://bugzilla.suse.com/1006836"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1025",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1025"
},
{
"cve": "CVE-2016-1026",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1026"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1026",
"url": "https://www.suse.com/security/cve/CVE-2016-1026"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1026",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1026"
},
{
"cve": "CVE-2016-1027",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1027"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1027",
"url": "https://www.suse.com/security/cve/CVE-2016-1027"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1027",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1027"
},
{
"cve": "CVE-2016-1028",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1028"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1028",
"url": "https://www.suse.com/security/cve/CVE-2016-1028"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1028",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1028"
},
{
"cve": "CVE-2016-1029",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1029"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1032, and CVE-2016-1033.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1029",
"url": "https://www.suse.com/security/cve/CVE-2016-1029"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1029",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1029"
},
{
"cve": "CVE-2016-1030",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1030"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass intended access restrictions via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1030",
"url": "https://www.suse.com/security/cve/CVE-2016-1030"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1030",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1030"
},
{
"cve": "CVE-2016-1031",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1031"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, and CVE-2016-1017.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1031",
"url": "https://www.suse.com/security/cve/CVE-2016-1031"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1031",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1031"
},
{
"cve": "CVE-2016-1032",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1032"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, and CVE-2016-1033.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1032",
"url": "https://www.suse.com/security/cve/CVE-2016-1032"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1032",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1032"
},
{
"cve": "CVE-2016-1033",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1033"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, and CVE-2016-1032.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1033",
"url": "https://www.suse.com/security/cve/CVE-2016-1033"
},
{
"category": "external",
"summary": "SUSE Bug 974209 for CVE-2016-1033",
"url": "https://bugzilla.suse.com/974209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1033"
},
{
"cve": "CVE-2016-1096",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1096"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1096",
"url": "https://www.suse.com/security/cve/CVE-2016-1096"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-1096",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1096"
},
{
"cve": "CVE-2016-1097",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1097"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1097",
"url": "https://www.suse.com/security/cve/CVE-2016-1097"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-1097",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1097"
},
{
"cve": "CVE-2016-1098",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1098"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1098",
"url": "https://www.suse.com/security/cve/CVE-2016-1098"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-1098",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1098"
},
{
"cve": "CVE-2016-1099",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1099"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1099",
"url": "https://www.suse.com/security/cve/CVE-2016-1099"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-1099",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1099"
},
{
"cve": "CVE-2016-1100",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1100"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1100",
"url": "https://www.suse.com/security/cve/CVE-2016-1100"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-1100",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1100"
},
{
"cve": "CVE-2016-1101",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1101"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1101",
"url": "https://www.suse.com/security/cve/CVE-2016-1101"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-1101",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1101"
},
{
"cve": "CVE-2016-1102",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1102"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1102",
"url": "https://www.suse.com/security/cve/CVE-2016-1102"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-1102",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1102"
},
{
"cve": "CVE-2016-1103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1103"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1103",
"url": "https://www.suse.com/security/cve/CVE-2016-1103"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-1103",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1103"
},
{
"cve": "CVE-2016-1104",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1104"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1104",
"url": "https://www.suse.com/security/cve/CVE-2016-1104"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-1104",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1104"
},
{
"cve": "CVE-2016-1105",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1105"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1105",
"url": "https://www.suse.com/security/cve/CVE-2016-1105"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-1105",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1105"
},
{
"cve": "CVE-2016-1106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1106"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1106",
"url": "https://www.suse.com/security/cve/CVE-2016-1106"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-1106",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1106"
},
{
"cve": "CVE-2016-1107",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1107"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1107",
"url": "https://www.suse.com/security/cve/CVE-2016-1107"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-1107",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1107"
},
{
"cve": "CVE-2016-1108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1108"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1108",
"url": "https://www.suse.com/security/cve/CVE-2016-1108"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-1108",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1108"
},
{
"cve": "CVE-2016-1109",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1109"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1109",
"url": "https://www.suse.com/security/cve/CVE-2016-1109"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-1109",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1109"
},
{
"cve": "CVE-2016-1110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1110"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1110",
"url": "https://www.suse.com/security/cve/CVE-2016-1110"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-1110",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-1110"
},
{
"cve": "CVE-2016-4108",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4108"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4108",
"url": "https://www.suse.com/security/cve/CVE-2016-4108"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-4108",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-4108"
},
{
"cve": "CVE-2016-4109",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4109"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4109",
"url": "https://www.suse.com/security/cve/CVE-2016-4109"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-4109",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-4109"
},
{
"cve": "CVE-2016-4110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4110"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4110",
"url": "https://www.suse.com/security/cve/CVE-2016-4110"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-4110",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-4110"
},
{
"cve": "CVE-2016-4111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4111"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4111",
"url": "https://www.suse.com/security/cve/CVE-2016-4111"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-4111",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-4111"
},
{
"cve": "CVE-2016-4112",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4112"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4112",
"url": "https://www.suse.com/security/cve/CVE-2016-4112"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-4112",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-4112"
},
{
"cve": "CVE-2016-4113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4113"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4113",
"url": "https://www.suse.com/security/cve/CVE-2016-4113"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-4113",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-4113"
},
{
"cve": "CVE-2016-4114",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4114"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4114",
"url": "https://www.suse.com/security/cve/CVE-2016-4114"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-4114",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-4114"
},
{
"cve": "CVE-2016-4115",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4115"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4115",
"url": "https://www.suse.com/security/cve/CVE-2016-4115"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-4115",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-4115"
},
{
"cve": "CVE-2016-4116",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4116"
}
],
"notes": [
{
"category": "general",
"text": "Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4116",
"url": "https://www.suse.com/security/cve/CVE-2016-4116"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-4116",
"url": "https://bugzilla.suse.com/979422"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-4116"
},
{
"cve": "CVE-2016-4117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4117"
}
],
"notes": [
{
"category": "general",
"text": "Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4117",
"url": "https://www.suse.com/security/cve/CVE-2016-4117"
},
{
"category": "external",
"summary": "SUSE Bug 979422 for CVE-2016-4117",
"url": "https://bugzilla.suse.com/979422"
},
{
"category": "external",
"summary": "SUSE Bug 984695 for CVE-2016-4117",
"url": "https://bugzilla.suse.com/984695"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1.x86_64",
"SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-16T12:14:28Z",
"details": "important"
}
],
"title": "CVE-2016-4117"
}
]
}
rhsa-2016_0610
Vulnerability from csaf_redhat
Published
2016-04-08 12:55
Modified
2024-11-14 19:01
Summary
Red Hat Security Advisory: flash-plugin security update
Notes
Topic
An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.
This update upgrades Flash Player to version 11.2.202.616.
Security Fix(es):
* This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2016-1006, CVE-2016-1011, CVE-2016-1012, CVE-2016-1013, CVE-2016-1014, CVE-2016-1015, CVE-2016-1016, CVE-2016-1017, CVE-2016-1018, CVE-2016-1019, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1030, CVE-2016-1031, CVE-2016-1032, CVE-2016-1033)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.\n\nThis update upgrades Flash Player to version 11.2.202.616.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2016-1006, CVE-2016-1011, CVE-2016-1012, CVE-2016-1013, CVE-2016-1014, CVE-2016-1015, CVE-2016-1016, CVE-2016-1017, CVE-2016-1018, CVE-2016-1019, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1030, CVE-2016-1031, CVE-2016-1032, CVE-2016-1033)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:0610",
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0610.json"
}
],
"title": "Red Hat Security Advisory: flash-plugin security update",
"tracking": {
"current_release_date": "2024-11-14T19:01:26+00:00",
"generator": {
"date": "2024-11-14T19:01:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2016:0610",
"initial_release_date": "2016-04-08T12:55:50+00:00",
"revision_history": [
{
"date": "2016-04-08T12:55:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-04-08T12:55:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T19:01:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"product": {
"name": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"product_id": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.616-1.el6_7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.616-1.el5.i386",
"product": {
"name": "flash-plugin-0:11.2.202.616-1.el5.i386",
"product_id": "flash-plugin-0:11.2.202.616-1.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.616-1.el5?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.616-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386"
},
"product_reference": "flash-plugin-0:11.2.202.616-1.el5.i386",
"relates_to_product_reference": "5Client-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.616-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386"
},
"product_reference": "flash-plugin-0:11.2.202.616-1.el5.i386",
"relates_to_product_reference": "5Server-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.616-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"relates_to_product_reference": "6Client-Supplementary-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.616-1.el6_7.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"relates_to_product_reference": "6Server-Supplementary-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.616-1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.7.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-1006",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass the ASLR protection mechanism via JIT data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1006"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1006",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1006"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1006",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1006"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1011",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1013, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1011"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1011",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1011"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1011",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1011"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1012",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1012"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1012",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1012"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1013",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1013"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1013",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1013"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1013",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1013"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1014",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows local users to gain privileges via a Trojan horse resource in an unspecified directory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1014"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1014",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1014"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1014",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1014"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1015",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code by overriding NetConnection object properties to leverage an unspecified \"type confusion,\" a different vulnerability than CVE-2016-1019.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1015"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1015",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1015"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1015",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1015"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1016",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1017, and CVE-2016-1031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1016"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1016",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1016"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1016",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1016"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1017",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, and CVE-2016-1031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1017"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1017",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1017"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1017",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1017"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1018",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via crafted JPEG-XR data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1018"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1018",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1018"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1018",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1018"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1019",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1019"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1019",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1019"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1019",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1019"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-03-03T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1020",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1020"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1020",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1020"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1020",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1020"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1021",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1021"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1021",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1021"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1021",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1021"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1022",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1022"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1022",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1022"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1022",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1022"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1023",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1023"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1023",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1023"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1023",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1023"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1024",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1024"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1024",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1024"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1024",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1024"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1025",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1025"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1025",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1025"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1025",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1025"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1026",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1026"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1026",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1026"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1026",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1026"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1027",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1027"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1027",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1027"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1027",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1027"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1028",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1028"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1028",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1028"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1028",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1028"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1029",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1029"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1029",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1029"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1030",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass intended access restrictions via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1030"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1030",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1030"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1030",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1030"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1031",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, and CVE-2016-1017.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1031"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1031",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1031"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1032",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1032"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1032",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1032"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1032",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1032"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1033",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, and CVE-2016-1032.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1033"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1033",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1033"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1033",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1033"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
}
]
}
RHSA-2016:0610
Vulnerability from csaf_redhat
Published
2016-04-08 12:55
Modified
2025-09-26 03:56
Summary
Red Hat Security Advisory: flash-plugin security update
Notes
Topic
An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.
This update upgrades Flash Player to version 11.2.202.616.
Security Fix(es):
* This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2016-1006, CVE-2016-1011, CVE-2016-1012, CVE-2016-1013, CVE-2016-1014, CVE-2016-1015, CVE-2016-1016, CVE-2016-1017, CVE-2016-1018, CVE-2016-1019, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1030, CVE-2016-1031, CVE-2016-1032, CVE-2016-1033)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.\n\nThis update upgrades Flash Player to version 11.2.202.616.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2016-1006, CVE-2016-1011, CVE-2016-1012, CVE-2016-1013, CVE-2016-1014, CVE-2016-1015, CVE-2016-1016, CVE-2016-1017, CVE-2016-1018, CVE-2016-1019, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1030, CVE-2016-1031, CVE-2016-1032, CVE-2016-1033)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:0610",
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0610.json"
}
],
"title": "Red Hat Security Advisory: flash-plugin security update",
"tracking": {
"current_release_date": "2025-09-26T03:56:06+00:00",
"generator": {
"date": "2025-09-26T03:56:06+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.8"
}
},
"id": "RHSA-2016:0610",
"initial_release_date": "2016-04-08T12:55:50+00:00",
"revision_history": [
{
"date": "2016-04-08T12:55:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-04-08T12:55:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-26T03:56:06+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"product": {
"name": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"product_id": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.616-1.el6_7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.616-1.el5.i386",
"product": {
"name": "flash-plugin-0:11.2.202.616-1.el5.i386",
"product_id": "flash-plugin-0:11.2.202.616-1.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.616-1.el5?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.616-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386"
},
"product_reference": "flash-plugin-0:11.2.202.616-1.el5.i386",
"relates_to_product_reference": "5Client-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.616-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386"
},
"product_reference": "flash-plugin-0:11.2.202.616-1.el5.i386",
"relates_to_product_reference": "5Server-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.616-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"relates_to_product_reference": "6Client-Supplementary-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.616-1.el6_7.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"relates_to_product_reference": "6Server-Supplementary-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.616-1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.7.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-1006",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass the ASLR protection mechanism via JIT data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1006"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1006",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1006"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1006",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1006"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1011",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1013, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1011"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1011",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1011"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1011",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1011"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1012",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1012"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1012",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1012"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1013",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1013"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1013",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1013"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1013",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1013"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1014",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows local users to gain privileges via a Trojan horse resource in an unspecified directory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1014"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1014",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1014"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1014",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1014"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1015",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code by overriding NetConnection object properties to leverage an unspecified \"type confusion,\" a different vulnerability than CVE-2016-1019.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1015"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1015",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1015"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1015",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1015"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1016",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1017, and CVE-2016-1031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1016"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1016",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1016"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1016",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1016"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1017",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, and CVE-2016-1031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1017"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1017",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1017"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1017",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1017"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1018",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via crafted JPEG-XR data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1018"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1018",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1018"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1018",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1018"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1019",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1019"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1019",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1019"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1019",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1019"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-03-03T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1020",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1020"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1020",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1020"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1020",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1020"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1021",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1021"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1021",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1021"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1021",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1021"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1022",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1022"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1022",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1022"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1022",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1022"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1023",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1023"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1023",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1023"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1023",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1023"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1024",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1024"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1024",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1024"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1024",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1024"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1025",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1025"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1025",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1025"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1025",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1025"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1026",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1026"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1026",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1026"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1026",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1026"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1027",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1027"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1027",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1027"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1027",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1027"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1028",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1028"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1028",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1028"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1028",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1028"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1029",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1029"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1029",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1029"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1030",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass intended access restrictions via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1030"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1030",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1030"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1030",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1030"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1031",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, and CVE-2016-1017.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1031"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1031",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1031"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1032",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1032"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1032",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1032"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1032",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1032"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1033",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, and CVE-2016-1032.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1033"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1033",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1033"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1033",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1033"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
}
]
}
rhsa-2016:0610
Vulnerability from csaf_redhat
Published
2016-04-08 12:55
Modified
2025-09-26 03:56
Summary
Red Hat Security Advisory: flash-plugin security update
Notes
Topic
An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.
This update upgrades Flash Player to version 11.2.202.616.
Security Fix(es):
* This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2016-1006, CVE-2016-1011, CVE-2016-1012, CVE-2016-1013, CVE-2016-1014, CVE-2016-1015, CVE-2016-1016, CVE-2016-1017, CVE-2016-1018, CVE-2016-1019, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1030, CVE-2016-1031, CVE-2016-1032, CVE-2016-1033)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.\n\nThis update upgrades Flash Player to version 11.2.202.616.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2016-1006, CVE-2016-1011, CVE-2016-1012, CVE-2016-1013, CVE-2016-1014, CVE-2016-1015, CVE-2016-1016, CVE-2016-1017, CVE-2016-1018, CVE-2016-1019, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1030, CVE-2016-1031, CVE-2016-1032, CVE-2016-1033)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:0610",
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0610.json"
}
],
"title": "Red Hat Security Advisory: flash-plugin security update",
"tracking": {
"current_release_date": "2025-09-26T03:56:06+00:00",
"generator": {
"date": "2025-09-26T03:56:06+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.8"
}
},
"id": "RHSA-2016:0610",
"initial_release_date": "2016-04-08T12:55:50+00:00",
"revision_history": [
{
"date": "2016-04-08T12:55:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-04-08T12:55:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-09-26T03:56:06+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.7.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"product": {
"name": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"product_id": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.616-1.el6_7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "flash-plugin-0:11.2.202.616-1.el5.i386",
"product": {
"name": "flash-plugin-0:11.2.202.616-1.el5.i386",
"product_id": "flash-plugin-0:11.2.202.616-1.el5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/flash-plugin@11.2.202.616-1.el5?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.616-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)",
"product_id": "5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386"
},
"product_reference": "flash-plugin-0:11.2.202.616-1.el5.i386",
"relates_to_product_reference": "5Client-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.616-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)",
"product_id": "5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386"
},
"product_reference": "flash-plugin-0:11.2.202.616-1.el5.i386",
"relates_to_product_reference": "5Server-Supplementary-5.11.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.616-1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"relates_to_product_reference": "6Client-Supplementary-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.616-1.el6_7.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"relates_to_product_reference": "6Server-Supplementary-6.7.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "flash-plugin-0:11.2.202.616-1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
},
"product_reference": "flash-plugin-0:11.2.202.616-1.el6_7.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.7.z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-1006",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass the ASLR protection mechanism via JIT data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1006"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1006",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1006"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1006",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1006"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1011",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1013, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1011"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1011",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1011"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1011",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1011"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1012",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1012"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1012",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1012"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1012",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1012"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1013",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1013"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1013",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1013"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1013",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1013"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1014",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows local users to gain privileges via a Trojan horse resource in an unspecified directory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1014"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1014",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1014"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1014",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1014"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1015",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code by overriding NetConnection object properties to leverage an unspecified \"type confusion,\" a different vulnerability than CVE-2016-1019.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1015"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1015",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1015"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1015",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1015"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1016",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1017, and CVE-2016-1031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1016"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1016",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1016"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1016",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1016"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1017",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, and CVE-2016-1031.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1017"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1017",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1017"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1017",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1017"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1018",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Stack-based buffer overflow in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via crafted JPEG-XR data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1018"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1018",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1018"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1018",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1018"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1019",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1019"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1019",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1019"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1019",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1019"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2022-03-03T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1020",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1020"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1020",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1020"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1020",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1020"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1021",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1021"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1021",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1021"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1021",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1021"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1022",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1022"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1022",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1022"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1022",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1022"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1023",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1023"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1023",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1023"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1023",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1023"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1024",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1024"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1024",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1024"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1024",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1024"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1025",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1025"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1025",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1025"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1025",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1025"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1026",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1026"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1026",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1026"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1026",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1026"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1027",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1027"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1027",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1027"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1027",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1027"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1028",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1028"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1028",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1028"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1028",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1028"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1029",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1032, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1029"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1029",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1029"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1030",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass intended access restrictions via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1030"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1030",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1030"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1030",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1030"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1031",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, and CVE-2016-1017.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1031"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1031",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1031"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1032",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, and CVE-2016-1033.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1032"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1032",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1032"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1032",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1032"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
},
{
"cve": "CVE-2016-1033",
"discovery_date": "2016-04-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1324353"
}
],
"notes": [
{
"category": "description",
"text": "Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, and CVE-2016-1032.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flash-plugin: multiple code execution issues fixed in APSB16-10",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1033"
},
{
"category": "external",
"summary": "RHBZ#1324353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1324353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1033",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1033"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1033",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1033"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"category": "external",
"summary": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
}
],
"release_date": "2016-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-04-08T12:55:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:0610"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"5Server-Supplementary-5.11.Z:flash-plugin-0:11.2.202.616-1.el5.i386",
"6Client-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Server-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686",
"6Workstation-Supplementary-6.7.z:flash-plugin-0:11.2.202.616-1.el6_7.i686"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "flash-plugin: multiple code execution issues fixed in APSB16-10"
}
]
}
ghsa-mj28-pj3c-6jwr
Vulnerability from github
Published
2022-05-14 02:24
Modified
2022-05-14 02:24
Severity ?
VLAI Severity ?
Details
Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.
{
"affected": [],
"aliases": [
"CVE-2016-1019"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2016-04-07T10:59:00Z",
"severity": "CRITICAL"
},
"details": "Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.",
"id": "GHSA-mj28-pj3c-6jwr",
"modified": "2022-05-14T02:24:41Z",
"published": "2022-05-14T02:24:41Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1019"
},
{
"type": "WEB",
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201606-08"
},
{
"type": "WEB",
"url": "https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html"
},
{
"type": "WEB",
"url": "http://blogs.adobe.com/psirt/?p=1330"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2016-0610.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/85856"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1035491"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
CERTFR-2016-ALE-002
Vulnerability from certfr_alerte
Une vulnérabilité a été découverte dans Adobe Flash
Player. Elle permet à un attaquant de provoquer une exécution de
code arbitraire à distance.
Cette vulnérabilité est activement exploitée dans le cadre d'attaques
ciblant toutes les versions de Windows exécutant Adobe Flash Player
versions 20.0.0.306 et antérieures.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation)
Adobe Flash Player versions 21.0.0.197 et antérieures sur Windows, Macintosh, Linux, et Chrome OS
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eAdobe Flash Player versions 21.0.0.197 et ant\u00e9rieures sur Windows, Macintosh, Linux, et Chrome OS\u003c/P\u003e",
"closed_at": "2016-04-08",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation)\n",
"cves": [
{
"name": "CVE-2016-1019",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1019"
}
],
"initial_release_date": "2016-04-06T00:00:00",
"last_revision_date": "2016-04-08T00:00:00",
"links": [
{
"title": "CERTFR-2016-AVI-116 Multiples vuln\u00e9rabilit\u00e9s dans Adobe Flash Player",
"url": "http://www.cert.ssi.gouv.fr/site/CERTFR-2016-AVI-116/"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB16-10 du 07 avril 2016",
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
},
{
"title": "EMET 5.5",
"url": "https://technet.microsoft.com/fr-fr/security/jj653751"
},
{
"title": "D\u00e9ploiement et configuration centralis\u00e9s d\u0027EMET pour le durcissement des postes de travail et des serveurs Microsoft Windows",
"url": "http://www.ssi.gouv.fr/administration/guide/deploiement-et-configuration-centralises-demet-pour-le-durcissement-des-postes-de-travail-et-des-serveurs-microsoft-windows/"
}
],
"reference": "CERTFR-2016-ALE-002",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2016-04-06T00:00:00.000000"
},
{
"description": "Adobe indique avoir constat\u00e9 des attaques ciblant toutes les versions de Windows (et non plus uniquement Windows 7 et Windows XP).",
"revision_date": "2016-04-07T00:00:00.000000"
},
{
"description": "cl\u00f4ture de l\u0027alerte, ajout des liens vers le bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur et l\u0027avis CERTFR-2016-AVI-116.",
"revision_date": "2016-04-08T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans \u003cspan class=\"textit\"\u003eAdobe Flash\nPlayer\u003c/span\u003e. Elle permet \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire \u00e0 distance. \nCette vuln\u00e9rabilit\u00e9 est activement exploit\u00e9e dans le cadre d\u0027attaques\nciblant toutes les versions de Windows ex\u00e9cutant Adobe Flash Player\nversions 20.0.0.306 et ant\u00e9rieures.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Adobe Flash Player",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSA16-01 du 05 avril 2016",
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
}
]
}
fkie_cve-2016-1019
Vulnerability from fkie_nvd
Published
2016-04-07 10:59
Modified
2025-04-12 10:46
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.
References
| URL | Tags | ||
|---|---|---|---|
| psirt@adobe.com | http://blogs.adobe.com/psirt/?p=1330 | Broken Link, Vendor Advisory | |
| psirt@adobe.com | http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html | Broken Link | |
| psirt@adobe.com | http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html | Broken Link | |
| psirt@adobe.com | http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html | Broken Link | |
| psirt@adobe.com | http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html | Broken Link | |
| psirt@adobe.com | http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html | Broken Link | |
| psirt@adobe.com | http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html | Broken Link | |
| psirt@adobe.com | http://rhn.redhat.com/errata/RHSA-2016-0610.html | Third Party Advisory | |
| psirt@adobe.com | http://www.securityfocus.com/bid/85856 | Broken Link, Third Party Advisory, VDB Entry | |
| psirt@adobe.com | http://www.securitytracker.com/id/1035491 | Broken Link, Third Party Advisory, VDB Entry | |
| psirt@adobe.com | https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050 | Patch, Third Party Advisory, Vendor Advisory | |
| psirt@adobe.com | https://helpx.adobe.com/security/products/flash-player/apsa16-01.html | Vendor Advisory | |
| psirt@adobe.com | https://helpx.adobe.com/security/products/flash-player/apsb16-10.html | Vendor Advisory | |
| psirt@adobe.com | https://security.gentoo.org/glsa/201606-08 | Third Party Advisory | |
| psirt@adobe.com | https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://blogs.adobe.com/psirt/?p=1330 | Broken Link, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2016-0610.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/85856 | Broken Link, Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securitytracker.com/id/1035491 | Broken Link, Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050 | Patch, Third Party Advisory, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://helpx.adobe.com/security/products/flash-player/apsa16-01.html | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://helpx.adobe.com/security/products/flash-player/apsb16-10.html | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://security.gentoo.org/glsa/201606-08 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html | Broken Link |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| adobe | flash_player_desktop_runtime | * | |
| apple | mac_os_x | - | |
| microsoft | windows | - | |
| adobe | flash_player | * | |
| apple | mac_os_x | - | |
| microsoft | windows | - | |
| adobe | flash_player | * | |
| apple | mac_os_x | - | |
| chrome_os | - | ||
| linux | linux_kernel | - | |
| microsoft | windows | - | |
| adobe | flash_player | * | |
| microsoft | windows_10 | - | |
| adobe | flash_player | * | |
| microsoft | windows_10 | - | |
| microsoft | windows_8.1 | - | |
| adobe | flash_player | * | |
| linux | linux_kernel | - | |
| adobe | air_desktop_runtime | * | |
| apple | mac_os_x | - | |
| microsoft | windows | - | |
| adobe | air_sdk | * | |
| apple | iphone_os | - | |
| apple | mac_os_x | - | |
| android | - | ||
| microsoft | windows | - | |
| adobe | air_sdk_\&_compiler | * | |
| apple | iphone_os | - | |
| apple | mac_os_x | - | |
| android | - | ||
| microsoft | windows | - |
{
"cisaActionDue": "2022-03-24",
"cisaExploitAdd": "2022-03-03",
"cisaRequiredAction": "The impacted product is end-of-life and should be disconnected if still in use.",
"cisaVulnerabilityName": "Adobe Flash Player Arbitrary Code Execution Vulnerability",
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EAB15A84-C6CE-4B87-B058-1ACAF56D96A5",
"versionEndIncluding": "21.0.0.197",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*",
"matchCriteriaId": "68F6E54E-28D2-460A-9167-8BD0D3283E26",
"versionEndIncluding": "18.0.0.333",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*",
"matchCriteriaId": "9B384454-A4B4-4E57-8B0C-2B7BB8DCC545",
"versionEndIncluding": "21.0.0.197",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:google:chrome_os:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D32ACF6F-5FF7-4815-8EAD-4719F5FC9B79",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*",
"matchCriteriaId": "7B5CCFA5-1620-4BC0-ABC3-10F6CFC2D7FB",
"versionEndIncluding": "21.0.0.197",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"matchCriteriaId": "21540673-614A-4D40-8BD7-3F07723803B0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*",
"matchCriteriaId": "0303DA1C-3C95-4E68-B654-579A302FDF62",
"versionEndIncluding": "21.0.0.197",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
"matchCriteriaId": "21540673-614A-4D40-8BD7-3F07723803B0",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
"matchCriteriaId": "DBB40E98-5A3C-4D4E-BF35-66D8490D6B96",
"versionEndIncluding": "11.2.202.577",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:air_desktop_runtime:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5C86F836-BD68-4B24-87F0-536D61670256",
"versionEndIncluding": "21.0.0.176",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B2F4F71D-DA29-43C6-B71F-26F0E1E82619",
"versionEndIncluding": "21.0.0.176",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B5415705-33E5-46D5-8E4D-9EBADC8C5705",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:air_sdk_\\\u0026_compiler:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B1EBEC22-8E22-47A6-B3F9-2D577AFE5FA1",
"versionEndIncluding": "21.0.0.176",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B5415705-33E5-46D5-8E4D-9EBADC8C5705",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016."
},
{
"lang": "es",
"value": "Adobe Flash Player 21.0.0.197 y versiones anteriores permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda de aplicaci\u00f3n) o posiblemente ejecutar c\u00f3digo arbitrario a trav\u00e9s de vectores no especificados, seg\u00fan se ha explotado activamente en Abril de 2016."
}
],
"id": "CVE-2016-1019",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": true,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2016-04-07T10:59:01.447",
"references": [
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link",
"Vendor Advisory"
],
"url": "http://blogs.adobe.com/psirt/?p=1330"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0610.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/85856"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1035491"
},
{
"source": "psirt@adobe.com",
"tags": [
"Patch",
"Third Party Advisory",
"Vendor Advisory"
],
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050"
},
{
"source": "psirt@adobe.com",
"tags": [
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
},
{
"source": "psirt@adobe.com",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/201606-08"
},
{
"source": "psirt@adobe.com",
"tags": [
"Broken Link"
],
"url": "https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Vendor Advisory"
],
"url": "http://blogs.adobe.com/psirt/?p=1330"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00009.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00010.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00012.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00055.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-0610.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/85856"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1035491"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory",
"Vendor Advisory"
],
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/flash-player/apsb16-10.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/201606-08"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "https://www.fireeye.com/blog/threat-research/2016/04/cve-2016-1019_a_new.html"
}
],
"sourceIdentifier": "psirt@adobe.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
cnvd-2016-02010
Vulnerability from cnvd
Title
Adobe Flash Player拒绝服务漏洞（CNVD-2016-02010）
Description
Adobe Flash Player是美国奥多比（Adobe）公司的一款跨平台、基于浏览器的多媒体播放器产品。该产品支持跨屏幕和浏览器查看应用程序、内容和视频。
基于Windows、Macintosh、Linux和Chrome OS平台的Adobe Flash Player 21.0.0.197及之前版本存在拒绝漏洞。攻击者可利用该漏洞造成拒绝服务（崩溃），控制受影响系统。
Severity
中
VLAI Severity ?
Patch Name
Adobe Flash Player拒绝服务漏洞（CNVD-2016-02010）的补丁
Patch Description
Adobe Flash Player是美国奥多比（Adobe）公司的一款跨平台、基于浏览器的多媒体播放器产品。该产品支持跨屏幕和浏览器查看应用程序、内容和视频。
基于Windows、Macintosh、Linux和Chrome OS平台的Adobe Flash Player 21.0.0.197及之前版本存在拒绝漏洞。攻击者可利用该漏洞造成拒绝服务（崩溃），控制受影响系统。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
用户可参考如下供应商提供的安全公告获得补丁信息： https://helpx.adobe.com/security/products/flash-player/apsa16-01.html
Reference
https://helpx.adobe.com/security/products/flash-player/apsa16-01.html
Impacted products
| Name | Adobe Flash Player <=21.0.0.197 |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2016-1019"
}
},
"description": "Adobe Flash Player\u662f\u7f8e\u56fd\u5965\u591a\u6bd4\uff08Adobe\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u8de8\u5e73\u53f0\u3001\u57fa\u4e8e\u6d4f\u89c8\u5668\u7684\u591a\u5a92\u4f53\u64ad\u653e\u5668\u4ea7\u54c1\u3002\u8be5\u4ea7\u54c1\u652f\u6301\u8de8\u5c4f\u5e55\u548c\u6d4f\u89c8\u5668\u67e5\u770b\u5e94\u7528\u7a0b\u5e8f\u3001\u5185\u5bb9\u548c\u89c6\u9891\u3002\r\n\r\n\u57fa\u4e8eWindows\u3001Macintosh\u3001Linux\u548cChrome OS\u5e73\u53f0\u7684Adobe Flash Player 21.0.0.197\u53ca\u4e4b\u524d\u7248\u672c\u5b58\u5728\u62d2\u7edd\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5d29\u6e83\uff09\uff0c\u63a7\u5236\u53d7\u5f71\u54cd\u7cfb\u7edf\u3002",
"discovererName": "Kafeine (EmergingThreats/Proofpoint) and Genwei Jiang (FireEye, Inc.), as well as Clement Lecigne of Google",
"formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2016-02010",
"openTime": "2016-04-07",
"patchDescription": "Adobe Flash Player\u662f\u7f8e\u56fd\u5965\u591a\u6bd4\uff08Adobe\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u8de8\u5e73\u53f0\u3001\u57fa\u4e8e\u6d4f\u89c8\u5668\u7684\u591a\u5a92\u4f53\u64ad\u653e\u5668\u4ea7\u54c1\u3002\u8be5\u4ea7\u54c1\u652f\u6301\u8de8\u5c4f\u5e55\u548c\u6d4f\u89c8\u5668\u67e5\u770b\u5e94\u7528\u7a0b\u5e8f\u3001\u5185\u5bb9\u548c\u89c6\u9891\u3002\r\n\r\n\u57fa\u4e8eWindows\u3001Macintosh\u3001Linux\u548cChrome OS\u5e73\u53f0\u7684Adobe Flash Player 21.0.0.197\u53ca\u4e4b\u524d\u7248\u672c\u5b58\u5728\u62d2\u7edd\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5d29\u6e83\uff09\uff0c\u63a7\u5236\u53d7\u5f71\u54cd\u7cfb\u7edf\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Adobe Flash Player\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2016-02010\uff09\u7684\u8865\u4e01",
"products": {
"product": "Adobe Flash Player \u003c=21.0.0.197"
},
"referenceLink": "https://helpx.adobe.com/security/products/flash-player/apsa16-01.html",
"serverity": "\u4e2d",
"submitTime": "2016-04-06",
"title": "Adobe Flash Player\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2016-02010\uff09"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…