CVE-2016-4117

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-03-03

Reference

https://nvd.nist.gov/vuln/detail/CVE-2016-4117

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.

Players implicated

Adobe · vendor Flash Player · product

Description

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.

Affected FedRAMP products 8 in the catalog

Product	Provider	Status	Match
Adobe Acrobat Sign for Government	Adobe	Authorized	vendor-exact · 0.90
Adobe Analytics	Adobe	Authorized	vendor-exact · 0.90
Adobe Campaign	Adobe	Authorized	vendor-exact · 0.90
Adobe Connect Managed Services (ACMS-GC)	Adobe	Authorized	vendor-exact · 0.90
Adobe Creative Cloud for Enterprise	Adobe	Authorized	vendor-exact · 0.90
Adobe Document Cloud (PDF Services & Adobe Sign)	Adobe	Authorized	vendor-exact · 0.90
Adobe Experience Manager Managed Services (AEMMS-GC)	Adobe	Authorized	vendor-exact · 0.90
Adobe Learning Manager	Adobe	Authorized	vendor-exact · 0.90