Vulnerability CVE-2016-4177

Vulnerability Name:

CVE-2016-4177 (CCN-114821)

Assigned:

2016-07-12

Published:

2016-07-12

Updated:

2023-01-20

Summary:

CVSS v3 Severity:

8.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
7.9 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

8.8 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
7.9 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

9.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2016-4177

Source: psirt@adobe.com
Type: Broken Link
psirt@adobe.com

Source: psirt@adobe.com
Type: Broken Link
psirt@adobe.com

Source: CCN
Type: RHSA-2016-1423
Critical: flash-plugin security update

Source: CCN
Type: BID-91721
Adobe Flash Player APSB16-25 Multiple Remote Code Execution Vulnerabilities

Source: psirt@adobe.com
Type: Third Party Advisory, VDB Entry
psirt@adobe.com

Source: psirt@adobe.com
Type: Broken Link, Third Party Advisory, VDB Entry
psirt@adobe.com

Source: psirt@adobe.com
Type: Third Party Advisory
psirt@adobe.com

Source: psirt@adobe.com
Type: Patch, Vendor Advisory
psirt@adobe.com

Source: XF
Type: UNKNOWN
adobe-flash-cve20164177-code-exec(114821)

Source: CCN
Type: Adobe Security Bulletin APSB16-25
Security updates available for Adobe Flash Player

Source: psirt@adobe.com
Type: Patch, Vendor Advisory
psirt@adobe.com

Source: EXPLOIT-DB
Type: EXPLOIT
Offensive Security Exploit Database [07-13-2016]

Source: psirt@adobe.com
Type: Exploit, Third Party Advisory, VDB Entry
psirt@adobe.com

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2016-4177

Vulnerable Configuration:

Configuration CCN 1:

cpe:/a:adobe:flash_player:22.0.0.192:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:22.0.0.192:*:*:*:*:*:*:*

AND

cpe:/o:redhat:enterprise_linux_server_supplementary:6:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_workstation_supplementary:6:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_desktop_supplementary:6:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_8:-:-:-:*:-:-:x32:*

OR cpe:/o:microsoft:windows_8:::~~~~x64~:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_rt:-:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_8.1:-:-:-:*:-:-:x32:*

OR cpe:/o:microsoft:windows_8.1:::~~~~x64~:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*

OR cpe:/a:google:chrome:51:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20164177	V	CVE-2016-4177	2022-05-20
oval:org.opensuse.security:def:47243	P	dovecot22-2.2.30.2-14.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47002	P	libXvMC1-1.0.8-3.56 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47314	P	libXfixes3-32bit-5.0.1-7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47086	P	libthai-data-0.1.25-4.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47952	P	apache2-mod_nss-1.0.14-19.9.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:48006	P	file-5.22-10.12.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47148	P	rsyslog-8.4.0-14.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:47212	P	automake-1.13.4-6.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:11752	P	zoo-2.10-1020.62 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11610	P	libipa_hbac0-1.11.5.1-14.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11761	P	at-3.1.14-7.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11685	P	pam_krb5-2.4.4-4.5 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11774	P	coolkey-1.1.0-147.71 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11710	P	rhythmbox-3.0.2-1.92 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12412	P	clamav-0.100.2-33.18.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11461	P	strongswan-5.1.3-4.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12434	P	e2fsprogs-1.43.8-1.19 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46418	P	ft2demos-2.5.3-2.11 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11483	P	xorg-x11-libs-7.6-45.14 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46550	P	perl-32bit-5.18.2-3.7 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11529	P	expat-2.1.0-13.232 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11453	P	rhythmbox-3.0.2-1.92 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46641	P	davfs2-1.5.2-2.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11576	P	libXcursor1-1.1.14-3.60 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:46788	P	libyaml-0-2-0.1.6-7.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11591	P	libarchive13-3.1.2-9.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:55768	P	Security update for python-setuptools (Important)	2020-12-02
oval:org.opensuse.security:def:24597	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:52917	P	Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:24398	P	Security update for libqt5-qtbase (Moderate)	2020-12-01
oval:org.opensuse.security:def:24678	P	Security update for gnuplot (Moderate)	2020-12-01
oval:org.opensuse.security:def:53057	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:46093	P	Security update for tomcat (Moderate)	2020-12-01
oval:org.opensuse.security:def:24734	P	Security update for MozillaFirefox (Moderate)	2020-12-01
oval:org.opensuse.security:def:53295	P	Security update for ovmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:46106	P	Security update for freetype2 (Important)	2020-12-01
oval:org.opensuse.security:def:25107	P	Security update for openssl-1_1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:52894	P	Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:24817	P	Security update for openssl (Moderate)	2020-12-01
oval:org.opensuse.security:def:53468	P	Security update for rmt-server (Moderate)	2020-12-01
oval:org.opensuse.security:def:46226	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:25121	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:54225	P	java-1_7_0-openjdk-plugin on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24967	P	Security update for postgresql10 (Important)	2020-12-01
oval:org.opensuse.security:def:53574	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:25165	P	Security update for squid (Important)	2020-12-01
oval:org.opensuse.security:def:54299	P	libproxy1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:46092	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:25020	P	Security update for ibus (Important)	2020-12-01
oval:org.opensuse.security:def:53740	P	Security update for php7 (Important)	2020-12-01
oval:org.opensuse.security:def:25803	P	Security update for flash-player (Moderate)	2020-12-01
oval:org.opensuse.security:def:54337	P	mozilla-nspr-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24408	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:54025	P	libgc1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25838	P	Security update for flash-player (Important)	2020-12-01
oval:org.opensuse.security:def:54418	P	NetworkManager on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:24471	P	Security update for kernel-source (Important)	2020-12-01
oval:org.opensuse.security:def:52895	P	Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:54133	P	vino on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55694	P	Security update for ghostscript (Low)	2020-12-01
oval:org.cisecurity:def:1123	V	Unspecified vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 - CVE-2016-4177	2016-09-23
oval:org.opensuse.security:def:78402	P	Security update for flash-player (Important)	2016-07-20
oval:com.ubuntu.xenial:def:201641770000000	V	CVE-2016-4177 on Ubuntu 16.04 LTS (xenial) - medium.	2016-07-13
oval:com.ubuntu.precise:def:20164177000	V	CVE-2016-4177 on Ubuntu 12.04 LTS (precise) - medium.	2016-07-12
oval:com.ubuntu.trusty:def:20164177000	V	CVE-2016-4177 on Ubuntu 14.04 LTS (trusty) - medium.	2016-07-12
oval:com.ubuntu.xenial:def:20164177000	V	CVE-2016-4177 on Ubuntu 16.04 LTS (xenial) - medium.	2016-07-12

BACK