CVE-2016-1014

 

Published at: - 09-04-2016 03:59

Last modified: - 23-01-2023 07:44

Total changes: - 12

Description

Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows local users to gain privileges via a Trojan horse resource in an unspecified directory.

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://helpx.adobe.com/security/products/flash-player/apsb16-10.html
• http://packetstormsecurity.com/files/137532/Adobe-Flash-Player-DLL-Hijacking.html
• 20160618 [CVE-2016-1014] Escalation of privilege via executable (un)installers of Flash Player-
• RHSA-2016:0610-
• SUSE-SU-2016:1305-
• openSUSE-SU-2016:1306-
• 1035509-
• 20160617 [CVE-2016-1014] Escalation of privilege via executable (un)installers of Flash Player-
• MS16-050-

 

Keywords

NVD

 

CVE-2016-1014

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures