Think you have a false positive on this rule?

Sid 1-39274

Message

FILE-FLASH Adobe Flash Player malformed ATF heap overflow attempt

Summary

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, and CVE-2016-1005.

Impact

CVSS base score 9.8 CVSS impact score 5.9 CVSS exploitability score 3.9 confidentialityImpact HIGH integrityImpact HIGH availabilityImpact HIGH

CVE-2016-1002:

CVSS base score 9.8

CVSS impact score 5.9

CVSS exploitability score 3.9

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

CVE-2016-1102:

CVSS base score 7.5

CVSS impact score 5.9

CVSS exploitability score 1.6

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

CVE-2016-4135:

CVSS base score 8.8

CVSS impact score 5.9

CVSS exploitability score 2.8

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

CVE-2017-2927:

CVSS base score 9.8

CVSS impact score 5.9

CVSS exploitability score 3.9

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Detailed information

CVE-2016-1002: Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, and CVE-2016-1005.

CVE-2016-1102: Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.

CVE-2016-4135: Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

CVE-2017-2927: Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files. Successful exploitation could lead to arbitrary code execution.

Affected systems

  • adobe air 20.0.0.233
  • adobe air 20.0.0.260
  • adobe air_sdk 20.0.0.260
  • adobe airsdk&_compiler 20.0.0.260
  • adobe flash_player 11.2.202.569
  • adobe flash_player 19.0.0.185
  • adobe flash_player 19.0.0.207
  • adobe flash_player 19.0.0.226
  • adobe flash_player 19.0.0.245
  • adobe flash_player 20.0.0.228
  • adobe flash_player 20.0.0.235
  • adobe flash_player 20.0.0.286
  • adobe flash_player 20.0.0.306
  • adobe flashplayeresr 18.0.0.329
  • adobe flash_player 21.0.0.213
  • microsoft edge -
  • microsoft internet_explorer 10
  • microsoft internet_explorer 11
  • adobe flash_player 18.0.0.352
  • adobe flash_player 21.0.0.242
  • adobe flashplayerfor_linux 11.2.202.621
  • redhat enterpriselinuxdesktop 5.0
  • redhat enterpriselinuxdesktop 6.0
  • redhat enterpriselinuxserver 5.0
  • redhat enterpriselinuxserver 6.0
  • redhat enterpriselinuxworkstation 5.0
  • redhat enterpriselinuxworkstation 6.0
  • adobe flash_player 24.0.0.186

Ease of attack

CVE-2016-1002:

Access Vector

Access Complexity

Authentication

CVE-2016-1102:

Access Vector

Access Complexity

Authentication

CVE-2016-4135:

Access Vector

Access Complexity

Authentication

CVE-2017-2927:

Access Vector

Access Complexity

Authentication

False positives

None known

False negatives

None known

Corrective action

Contributors

  • Talos research team.
  • This document was generated from data supplied by the national vulnerability database, a product of the national institute of standards and technology.
  • For more information see nvd.

Additional References

  • helpx.adobe.com/security/products/flash-player/apsb16-08.html
  • helpx.adobe.com/security/products/flash-player/apsb16-15.html
  • helpx.adobe.com/security/products/flash-player/apsb16-18.html
  • helpx.adobe.com/security/products/flash-player/apsb17-02.html