CVE-2016-1014 : Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and

Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows local users to gain privileges via a Trojan horse resource in an unspecified directory.

Published 2016-04-09 01:59:30

Updated 2023-02-03 17:29:46

Source Adobe Systems Incorporated

View at NVD, CVE.org

Vulnerability category: File inclusion

Products affected by CVE-2016-1014

Adobe » Flash Player » For Internet Explorer
Versions up to, including, (<=) 21.0.0.197
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:internet_explorer:*:*
Matching versions
When used together with: Microsoft » Windows 10 » Version: N/A
When used together with: Microsoft » Windows 8.1 » Version: N/A
Adobe » Flash Player » ESR Edition
Versions up to, including, (<=) 18.0.0.333
cpe:2.3:a:adobe:flash_player:*:*:*:*:esr:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Adobe » Flash Player » For Edge
Versions up to, including, (<=) 21.0.0.197
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:edge:*:*
Matching versions
When used together with: Microsoft » Windows 10 » Version: N/A
Adobe » Flash Player » For Chrome
Versions up to, including, (<=) 21.0.0.197
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: N/A
When used together with: Google » Chrome Os » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Adobe » Flash Player
Versions up to, including, (<=) 11.2.202.577
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
Adobe » Air Sdk & Compiler
Versions up to, including, (<=) 21.0.0.176
cpe:2.3:a:adobe:air_sdk_\&_compiler:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Iphone Os » Version: N/A
When used together with: Apple » Mac Os X » Version: N/A
When used together with: Google » Android » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Adobe » Air Sdk
Versions up to, including, (<=) 21.0.0.176
cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Iphone Os » Version: N/A
When used together with: Apple » Mac Os X » Version: N/A
When used together with: Google » Android » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Adobe » Air Desktop Runtime
Versions up to, including, (<=) 21.0.0.176
cpe:2.3:a:adobe:air_desktop_runtime:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Adobe » Flash Player Desktop Runtime
Versions up to, including, (<=) 21.0.0.197
cpe:2.3:a:adobe:flash_player_desktop_runtime:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Mac Os X » Version: N/A
When used together with: Microsoft » Windows » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2016-1014

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 8 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-1014

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C	3.4	10.0	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.3	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H	1.3	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2016-1014

CWE-426 Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-1014

http://rhn.redhat.com/errata/RHSA-2016-0610.html

RHSA-2016:0610 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://packetstormsecurity.com/files/137532/Adobe-Flash-Player-DLL-Hijacking.html

Adobe Flash Player DLL Hijacking ≈ Packet Storm
Third Party Advisory;VDB Entry
http://www.securityfocus.com/archive/1/538699/100/0/threaded

SecurityFocus
Broken Link;Third Party Advisory;VDB Entry
http://seclists.org/fulldisclosure/2016/Jun/39

Full Disclosure: [CVE-2016-1014] Escalation of privilege via executable (un)installers of Flash Player
Mailing List;Third Party Advisory
https://helpx.adobe.com/security/products/flash-player/apsb16-10.html

Adobe Security Bulletin
Patch;Vendor Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html

[security-announce] SUSE-SU-2016:1305-1: important: Security update for
Broken Link;Third Party Advisory

CVEs referencing this url
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-050

Microsoft Security Bulletin MS16-050 - Critical | Microsoft Docs
Patch;Third Party Advisory

CVEs referencing this url
http://www.securitytracker.com/id/1035509

Adobe Flash Player Multiple Bugs Lets Remote Users Execute Arbitrary Code and Bypass Security Restrictions - SecurityTracker
Broken Link;Third Party Advisory;VDB Entry

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00045.html

[security-announce] openSUSE-SU-2016:1306-1: important: Security update
Broken Link;Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2016-1014

Products affected by CVE-2016-1014

Exploit prediction scoring system (EPSS) score for CVE-2016-1014

CVSS scores for CVE-2016-1014

CWE ids for CVE-2016-1014

References for CVE-2016-1014