Details of VAR-201603-0270

ID

VAR-201603-0270

CVE

CVE-2016-0987

TITLE

Adobe Flash Player and Adobe AIR Vulnerable to arbitrary code execution

Trust: 0.8

sources: JVNDB: JVNDB-2016-001726

DESCRIPTION

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, CVE-2016-0999, and CVE-2016-1000. This vulnerability CVE-2016-0988 , CVE-2016-0990 , CVE-2016-0991 , CVE-2016-0994 , CVE-2016-0995 , CVE-2016-0996 , CVE-2016-0997 , CVE-2016-0998 , CVE-2016-0999 ,and CVE-2016-1000 Is a different vulnerability. Supplementary information : CWE Vulnerability type by CWE-416: Use-after-free ( Use of freed memory ) Has been identified. http://cwe.mitre.org/data/definitions/416.htmlAn attacker could execute arbitrary code. A use-after-free vulnerability exists in several Adobe products. The following versions are affected: Adobe Flash Player Desktop Runtime 20.0.0.306 and earlier versions based on Windows and Macintosh platforms, Adobe Flash Player Extended Support Release 18.0.0.329 and earlier versions, AIR Desktop Runtime 20.0.0.260 and earlier versions, based on Windows, Macintosh , Adobe Flash Player for Google Chrome 20.0.0.306 and earlier versions on Linux and ChromeOS platforms, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 20.0.0.306 and earlier versions based on Windows 10 platform, and Adobe Flash Player for Windows 8.1-based platforms Internet Explorer 11 20.0.0.306 and earlier versions, Adobe Flash Player for Linux 11.2.202.569 and earlier versions based on Linux platforms, AIR SDK 20.0.0.260 and earlier versions based on Windows, Macintosh, Android and iOS platforms, AIR SDK & Compiler 20.0 .0.260 and earlier, AIR for Android 20.0.0.233 and earlier. Background ========== The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Please review the CVE identifiers referenced below for details. Impact ====== A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions. Workaround ========== There is no known workaround at this time. Resolution ========== All Adobe Flash Player users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v "www-plugins/adobe-flash-11.2.202.577" References ========== [ 1 ] CVE-2016-0960 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0960 [ 2 ] CVE-2016-0961 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0961 [ 3 ] CVE-2016-0962 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0962 [ 4 ] CVE-2016-0963 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0963 [ 5 ] CVE-2016-0964 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0964 [ 6 ] CVE-2016-0965 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0965 [ 7 ] CVE-2016-0966 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0966 [ 8 ] CVE-2016-0967 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0967 [ 9 ] CVE-2016-0968 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0968 [ 10 ] CVE-2016-0969 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0969 [ 11 ] CVE-2016-0970 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0970 [ 12 ] CVE-2016-0971 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0971 [ 13 ] CVE-2016-0972 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0972 [ 14 ] CVE-2016-0973 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0973 [ 15 ] CVE-2016-0974 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0974 [ 16 ] CVE-2016-0975 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0975 [ 17 ] CVE-2016-0976 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0976 [ 18 ] CVE-2016-0977 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0977 [ 19 ] CVE-2016-0978 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0978 [ 20 ] CVE-2016-0979 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0979 [ 21 ] CVE-2016-0980 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0980 [ 22 ] CVE-2016-0981 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0981 [ 23 ] CVE-2016-0982 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0982 [ 24 ] CVE-2016-0983 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0983 [ 25 ] CVE-2016-0984 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0984 [ 26 ] CVE-2016-0985 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0985 [ 27 ] CVE-2016-0986 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0986 [ 28 ] CVE-2016-0987 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0987 [ 29 ] CVE-2016-0988 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0988 [ 30 ] CVE-2016-0989 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0989 [ 31 ] CVE-2016-0990 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0990 [ 32 ] CVE-2016-0991 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0991 [ 33 ] CVE-2016-0992 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0992 [ 34 ] CVE-2016-0993 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0993 [ 35 ] CVE-2016-0994 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0994 [ 36 ] CVE-2016-0995 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0995 [ 37 ] CVE-2016-0996 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0996 [ 38 ] CVE-2016-0997 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0997 [ 39 ] CVE-2016-0998 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0998 [ 40 ] CVE-2016-0999 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0999 [ 41 ] CVE-2016-1000 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-1000 [ 42 ] CVE-2016-1001 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-1001 [ 43 ] CVE-2016-1002 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-1002 [ 44 ] CVE-2016-1005 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-1005 [ 45 ] CVE-2016-1010 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-1010 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201603-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2016 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2016:0438-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2016-0438.html Issue date: 2016-03-11 CVE Names: CVE-2016-0960 CVE-2016-0961 CVE-2016-0962 CVE-2016-0963 CVE-2016-0986 CVE-2016-0987 CVE-2016-0988 CVE-2016-0989 CVE-2016-0990 CVE-2016-0991 CVE-2016-0992 CVE-2016-0993 CVE-2016-0994 CVE-2016-0995 CVE-2016-0996 CVE-2016-0997 CVE-2016-0998 CVE-2016-0999 CVE-2016-1000 CVE-2016-1001 CVE-2016-1002 CVE-2016-1005 CVE-2016-1010 ===================================================================== 1. Summary: An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. These vulnerabilities, detailed in the Adobe Security Bulletin APSB16-08 listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content. (CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0963, CVE-2016-0986, CVE-2016-0987, CVE-2016-0988, CVE-2016-0989, CVE-2016-0990, CVE-2016-0991, CVE-2016-0992, CVE-2016-0993, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, CVE-2016-0999, CVE-2016-1000, CVE-2016-1001, CVE-2016-1002, CVE-2016-1005, CVE-2016-1010) All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.577. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1316809 - flash-plugin: multiple code execution issues fixed in APSB16-08 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 5): i386: flash-plugin-11.2.202.577-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.577-1.el5.i386.rpm Red Hat Enterprise Linux Server Supplementary (v. 5): i386: flash-plugin-11.2.202.577-1.el5.i386.rpm x86_64: flash-plugin-11.2.202.577-1.el5.i386.rpm Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: flash-plugin-11.2.202.577-1.el6_7.i686.rpm x86_64: flash-plugin-11.2.202.577-1.el6_7.i686.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: flash-plugin-11.2.202.577-1.el6_7.i686.rpm x86_64: flash-plugin-11.2.202.577-1.el6_7.i686.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: flash-plugin-11.2.202.577-1.el6_7.i686.rpm x86_64: flash-plugin-11.2.202.577-1.el6_7.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2016-0960 https://access.redhat.com/security/cve/CVE-2016-0961 https://access.redhat.com/security/cve/CVE-2016-0962 https://access.redhat.com/security/cve/CVE-2016-0963 https://access.redhat.com/security/cve/CVE-2016-0986 https://access.redhat.com/security/cve/CVE-2016-0987 https://access.redhat.com/security/cve/CVE-2016-0988 https://access.redhat.com/security/cve/CVE-2016-0989 https://access.redhat.com/security/cve/CVE-2016-0990 https://access.redhat.com/security/cve/CVE-2016-0991 https://access.redhat.com/security/cve/CVE-2016-0992 https://access.redhat.com/security/cve/CVE-2016-0993 https://access.redhat.com/security/cve/CVE-2016-0994 https://access.redhat.com/security/cve/CVE-2016-0995 https://access.redhat.com/security/cve/CVE-2016-0996 https://access.redhat.com/security/cve/CVE-2016-0997 https://access.redhat.com/security/cve/CVE-2016-0998 https://access.redhat.com/security/cve/CVE-2016-0999 https://access.redhat.com/security/cve/CVE-2016-1000 https://access.redhat.com/security/cve/CVE-2016-1001 https://access.redhat.com/security/cve/CVE-2016-1002 https://access.redhat.com/security/cve/CVE-2016-1005 https://access.redhat.com/security/cve/CVE-2016-1010 https://access.redhat.com/security/updates/classification/#critical https://helpx.adobe.com/security/products/flash-player/apsb16-08.html 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2016 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFW4xBVXlSAg2UNWIIRAkCgAKCHw64puWPWdM5cVPU2vBI1mHZyFgCeI2Rx fg/pDiOCh9x1HJhk/a+BDeA= =4hyN -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce

Trust: 1.98

sources: NVD: CVE-2016-0987 // JVNDB: JVNDB-2016-001726 // VULHUB: VHN-88497 // VULMON: CVE-2016-0987 // PACKETSTORM: 136202 // PACKETSTORM: 136178

AFFECTED PRODUCTS

vendor:	adobe	model:	flash player	scope:	lte	version:	20.0.0.306	Trust: 1.0
vendor:	adobe	model:	air sdk \& compiler	scope:	lte	version:	20.0.0.260	Trust: 1.0
vendor:	adobe	model:	flash player desktop runtime	scope:	lte	version:	20.2.2.306	Trust: 1.0
vendor:	adobe	model:	air	scope:	lte	version:	20.0.0.233	Trust: 1.0
vendor:	samsung	model:	x14j	scope:	eq	version:	t-ms14jakucb-1102.5	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	lte	version:	11.2.202.569	Trust: 1.0
vendor:	adobe	model:	air desktop runtime	scope:	lte	version:	20.0.0.260	Trust: 1.0
vendor:	adobe	model:	air sdk	scope:	lte	version:	20.0.0.260	Trust: 1.0
vendor:	google	model:	chrome	scope:	-	version:	-	Trust: 0.8
vendor:	adobe	model:	air	scope:	lt	version:	21.0.0.176 (android)	Trust: 0.8
vendor:	adobe	model:	air	scope:	lt	version:	desktop runtime 21.0.0.176 (windows/macintosh)	Trust: 0.8
vendor:	adobe	model:	air sdk	scope:	lt	version:	21.0.0.176 (windows/macintosh/android/ios)	Trust: 0.8
vendor:	adobe	model:	air sdk & compiler	scope:	lt	version:	21.0.0.176 (windows/macintosh/android/ios)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	lt	version:	11.2.202.577 (linux)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	lt	version:	21.0.0.182 (windows 10 edition microsoft edge/internet explorer 11)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	lt	version:	21.0.0.182 (windows 8.1 edition internet explorer 11)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	lt	version:	21.0.0.182 (windows/macintosh/linux/chromeos edition chrome)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	lt	version:	desktop runtime 21.0.0.182 (windows/macintosh)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	lt	version:	continuous support release 18.0.0.333 (windows/macintosh)	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	for 32-bit systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	for x64-based systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	version 1511 for 32-bit systems	Trust: 0.8
vendor:	microsoft	model:	windows 10	scope:	eq	version:	version 1511 for x64-based systems	Trust: 0.8
vendor:	microsoft	model:	windows 8.1	scope:	eq	version:	for 32-bit systems	Trust: 0.8
vendor:	microsoft	model:	windows 8.1	scope:	eq	version:	for x64-based systems	Trust: 0.8
vendor:	microsoft	model:	windows rt 8.1	scope:	-	version:	-	Trust: 0.8
vendor:	microsoft	model:	windows server 2012	scope:	eq	version:	none	Trust: 0.8
vendor:	microsoft	model:	windows server 2012	scope:	eq	version:	r2	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	eq	version:	20.0.0.306	Trust: 0.6
vendor:	adobe	model:	flash player	scope:	eq	version:	19.0.0.226	Trust: 0.6
vendor:	adobe	model:	air sdk	scope:	eq	version:	20.0.0.260	Trust: 0.6
vendor:	adobe	model:	flash player	scope:	eq	version:	19.0.0.245	Trust: 0.6
vendor:	adobe	model:	flash player esr	scope:	eq	version:	18.0.0.329	Trust: 0.6
vendor:	adobe	model:	flash player	scope:	eq	version:	19.0.0.207	Trust: 0.6
vendor:	adobe	model:	air sdk \\\& compiler	scope:	eq	version:	20.0.0.260	Trust: 0.6
vendor:	adobe	model:	flash player	scope:	eq	version:	20.0.0.286	Trust: 0.6
vendor:	adobe	model:	air	scope:	eq	version:	20.0.0.233	Trust: 0.6
vendor:	adobe	model:	air	scope:	eq	version:	20.0.0.260	Trust: 0.6

sources: JVNDB: JVNDB-2016-001726 // CNNVD: CNNVD-201603-196 // NVD: CVE-2016-0987

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-0987
value:	HIGH
Trust: 1.0
NVD:	CVE-2016-0987
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201603-196
value:	HIGH
Trust: 0.6
VULHUB:	VHN-88497
value:	HIGH
Trust: 0.1
VULMON:	CVE-2016-0987
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2016-0987
severity:	HIGH
baseScore:	9.3
vectorString:	AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.6
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.1
NVD:	CVE-2016-0987
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8
VULHUB:	VHN-88497
severity:	HIGH
baseScore:	9.3
vectorString:	AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.6
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-0987
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.1
Trust: 1.0

sources: VULHUB: VHN-88497 // VULMON: CVE-2016-0987 // JVNDB: JVNDB-2016-001726 // CNNVD: CNNVD-201603-196 // NVD: CVE-2016-0987

PROBLEMTYPE DATA

problemtype:	CWE-416	Trust: 1.1
problemtype:	CWE-Other	Trust: 0.8

sources: VULHUB: VHN-88497 // JVNDB: JVNDB-2016-001726 // NVD: CVE-2016-0987

THREAT TYPE

remote

Trust: 0.7

sources: PACKETSTORM: 136202 // CNNVD: CNNVD-201603-196

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201603-196

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-001726

PATCH

title:	APSB16-08	url:	http://helpx.adobe.com/security/products/flash-player/apsb16-08.html	Trust: 0.8
title:	APSB16-08	url:	http://helpx.adobe.com/jp/security/products/flash-player/apsb16-08.html	Trust: 0.8
title:	Google Chrome	url:	https://www.google.com/intl/ja/chrome/browser/features.html	Trust: 0.8
title:	Chrome Releases	url:	http://googlechromereleases.blogspot.jp/	Trust: 0.8
title:	Google Chrome を更新する	url:	https://support.google.com/chrome/answer/95414?hl=ja	Trust: 0.8
title:	Security Update for Adobe Flash Player (3144756)	url:	https://technet.microsoft.com/en-us/library/security/MS16-036.aspx	Trust: 0.8
title:	Adobe Flash Player のセキュリティ更新プログラム (3144756)	url:	https://technet.microsoft.com/ja-jp/library/security/MS16-036.aspx	Trust: 0.8
title:	アドビシステムズ社 Adobe Flash Player の脆弱性に関するお知らせ	url:	http://www.fmworld.net/biz/common/adobe/20160314f.html	Trust: 0.8
title:	Multiple Adobe Remediation measures for reusing vulnerabilities after product release	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=60554	Trust: 0.6
title:	Red Hat: CVE-2016-0987	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database&qid=CVE-2016-0987	Trust: 0.1
title:	-	url:	https://github.com/Live-Hack-CVE/CVE-2016-0996	Trust: 0.1
title:	-	url:	https://github.com/Live-Hack-CVE/CVE-2016-0997	Trust: 0.1
title:	-	url:	https://github.com/Live-Hack-CVE/CVE-2016-0995	Trust: 0.1
title:	-	url:	https://github.com/Live-Hack-CVE/CVE-2016-0994	Trust: 0.1
title:	-	url:	https://github.com/Live-Hack-CVE/CVE-2016-0987	Trust: 0.1
title:	-	url:	https://github.com/Live-Hack-CVE/CVE-2016-0990	Trust: 0.1
title:	-	url:	https://github.com/Live-Hack-CVE/CVE-2016-0998	Trust: 0.1
title:	-	url:	https://github.com/Live-Hack-CVE/CVE-2016-1000	Trust: 0.1
title:	-	url:	https://github.com/Live-Hack-CVE/CVE-2016-0999	Trust: 0.1
title:	CVE-Study	url:	https://github.com/thdusdl1219/CVE-Study	Trust: 0.1
title:	BleepingComputer	url:	https://www.bleepingcomputer.com/news/security/adobe-patches-23-vulnerabilities-in-todays-flash-update/	Trust: 0.1

sources: VULMON: CVE-2016-0987 // JVNDB: JVNDB-2016-001726 // CNNVD: CNNVD-201603-196

EXTERNAL IDS

db:	NVD	id:	CVE-2016-0987	Trust: 2.8
db:	BID	id:	84312	Trust: 1.8
db:	SECTRACK	id:	1035251	Trust: 1.8
db:	JVNDB	id:	JVNDB-2016-001726	Trust: 0.8
db:	CNNVD	id:	CNNVD-201603-196	Trust: 0.7
db:	VULHUB	id:	VHN-88497	Trust: 0.1
db:	VULMON	id:	CVE-2016-0987	Trust: 0.1
db:	PACKETSTORM	id:	136202	Trust: 0.1
db:	PACKETSTORM	id:	136178	Trust: 0.1

sources: VULHUB: VHN-88497 // VULMON: CVE-2016-0987 // JVNDB: JVNDB-2016-001726 // PACKETSTORM: 136202 // PACKETSTORM: 136178 // CNNVD: CNNVD-201603-196 // NVD: CVE-2016-0987

REFERENCES

url:	http://www.securityfocus.com/bid/84312	Trust: 1.9
url:	https://helpx.adobe.com/security/products/flash-player/apsb16-08.html	Trust: 1.9
url:	https://security.gentoo.org/glsa/201603-07	Trust: 1.9
url:	http://www.securitytracker.com/id/1035251	Trust: 1.8
url:	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00022.html	Trust: 1.8
url:	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00023.html	Trust: 1.8
url:	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00024.html	Trust: 1.8
url:	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00032.html	Trust: 1.8
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-0987	Trust: 0.8
url:	https://www.ipa.go.jp/security/ciadr/vul/20160311-adobeflashplayer.html	Trust: 0.8
url:	http://www.jpcert.or.jp/at/2016/at160014.html	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-0987	Trust: 0.8
url:	http://www.npa.go.jp/cyberpolice/topics/?seq=17875	Trust: 0.8
url:	https://access.redhat.com/security/cve/cve-2016-0987	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0963	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0962	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0986	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0987	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0961	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0960	Trust: 0.2
url:	https://cwe.mitre.org/data/definitions/416.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0964	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0973	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0974	Trust: 0.1
url:	https://security.gentoo.org/	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0967	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0987	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0993	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0979	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-1000	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0976	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0995	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0984	Trust: 0.1
url:	http://creativecommons.org/licenses/by-sa/2.5	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0996	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0983	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0973	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0968	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-1010	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0966	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0991	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0972	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0984	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-1001	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0972	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0988	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-1002	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0975	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-1005	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0983	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0965	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0977	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0969	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0961	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0970	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0976	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0982	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0965	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0967	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0979	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0985	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0998	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0985	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0999	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0992	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0982	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0960	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0963	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0980	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0966	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0975	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0968	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0964	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0981	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0990	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0971	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0969	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0978	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0981	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0997	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0970	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0962	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0989	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0978	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0974	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0986	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0977	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0971	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0994	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-0980	Trust: 0.1
url:	https://bugs.gentoo.org.	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-1005	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0961	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0995	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0996	Trust: 0.1
url:	https://access.redhat.com/security/updates/classification/#critical	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-1010	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-1000	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0989	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0997	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0963	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0994	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0994	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0995	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0962	Trust: 0.1
url:	https://rhn.redhat.com/errata/rhsa-2016-0438.html	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-1001	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0993	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0997	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0990	Trust: 0.1
url:	https://access.redhat.com/articles/11258	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0999	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-1002	Trust: 0.1
url:	https://access.redhat.com/security/team/contact/	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0993	Trust: 0.1
url:	https://www.redhat.com/mailman/listinfo/rhsa-announce	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0960	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0998	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0986	Trust: 0.1
url:	https://bugzilla.redhat.com/):	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0996	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0998	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0992	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-1002	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0989	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-1001	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-1000	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0991	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0988	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-0988	Trust: 0.1
url:	https://access.redhat.com/security/team/key/	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2016-1010	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0999	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-1005	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0992	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0991	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-0990	Trust: 0.1

CREDITS

Gentoo

Trust: 0.1

sources: PACKETSTORM: 136202

SOURCES

db:	VULHUB	id:	VHN-88497
db:	VULMON	id:	CVE-2016-0987
db:	JVNDB	id:	JVNDB-2016-001726
db:	PACKETSTORM	id:	136202
db:	PACKETSTORM	id:	136178
db:	CNNVD	id:	CNNVD-201603-196
db:	NVD	id:	CVE-2016-0987

LAST UPDATE DATE

2024-08-14T13:32:49.394000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-88497	date:	2022-12-14T00:00:00
db:	VULMON	id:	CVE-2016-0987	date:	2022-12-14T00:00:00
db:	JVNDB	id:	JVNDB-2016-001726	date:	2016-03-17T00:00:00
db:	CNNVD	id:	CNNVD-201603-196	date:	2022-12-16T00:00:00
db:	NVD	id:	CVE-2016-0987	date:	2022-12-14T19:02:35.967

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-88497	date:	2016-03-12T00:00:00
db:	VULMON	id:	CVE-2016-0987	date:	2016-03-12T00:00:00
db:	JVNDB	id:	JVNDB-2016-001726	date:	2016-03-17T00:00:00
db:	PACKETSTORM	id:	136202	date:	2016-03-14T14:50:59
db:	PACKETSTORM	id:	136178	date:	2016-03-11T23:23:00
db:	CNNVD	id:	CNNVD-201603-196	date:	2016-03-11T00:00:00
db:	NVD	id:	CVE-2016-0987	date:	2016-03-12T15:59:07.823