CVE-2016-4287
Publication date 14 September 2016
Last updated 24 July 2024
Ubuntu priority
Integer overflow in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| adobe-flashplugin | 16.04 LTS xenial |
Fixed 20160913.1-0ubuntu0.16.04.1
|
| 14.04 LTS trusty |
Fixed 20160913.1-0ubuntu0.14.04.1
|
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score |
8.8 · High
|
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | Required |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | High |
| Availability impact | High |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |