High severity · published May 11, 2016
CVE-2016-1102
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has…
7.5
CVSS
39.6%
EPSS
No
On KEV
Description
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)39.6% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ED
Edge · Microsoft
All versions, or not specified · source: NVD
FP
Flash Player · Adobe
through 21.0.0.213 · source: NVD
IE
Internet Explorer · Microsoft
10; 11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-1102
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-1102
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html
packetstormsecurity.com
http://packetstormsecurity.com/files/137053/Adobe-Flash-JXR-Processing-Out-Of-Bounds-Read.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2016-1079.html
www.securityfocus.com
http://www.securityfocus.com/bid/90618
www.securitytracker.com
http://www.securitytracker.com/id/1035827
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-064
More from Flash Player
9.8
CVE-2016-4171
Adobe Flash Player Remote Code Execution Vulnerability
9.8
CVE-2016-4117
Adobe Flash Player Arbitrary Code Execution Vulnerability
9.8
CVE-2016-1019
Adobe Flash Player Arbitrary Code Execution Vulnerability
9.8
CVE-2015-5123
Adobe Flash Player Use-After-Free Vulnerability
9.8
CVE-2015-5122
Adobe Flash Player Use-After-Free Vulnerability