CVE-2016-4171: adobe flash player +6 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2016-4171

CVSS 9.8 · Critical KEV · sudah dieksploitasi EPSS 20,1%

Kerentanan pada adobe flash player, redhat enterprise linux desktop +5 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD. Masuk katalog KEV CISA pada 25 Maret 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.

Rincian

Terbit di NVD: 16 Juni 2016
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
EPSS (30 hari): 20,1% peluang dieksploitasi; lebih tinggi dari 97,3% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: Adobe Flash Player Remote Code Execution Vulnerability
Masuk KEV: 25 Maret 2022
Tenggat CISA: 15 April 2022 (untuk instansi federal AS)
Ransomware: Belum tercatat
Tindakan wajib: The impacted product is end-of-life and should be disconnected if still in use.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
adobe	flash player	Semua versi hingga 11.2.202.621
adobe	flash player	Semua versi hingga 21.0.0.242
adobe	flash player	Semua versi hingga 18.0.0.352
redhat	enterprise linux desktop	Versi 5.0
redhat	enterprise linux desktop	Versi 6.0
redhat	enterprise linux server	Versi 5.0
redhat	enterprise linux server	Versi 6.0
redhat	enterprise linux workstation	Versi 5.0
redhat	enterprise linux workstation	Versi 6.0
opensuse	opensuse	Versi 13.1
opensuse	opensuse	Versi 13.2
suse	linux enterprise desktop	Versi 12
suse	linux enterprise desktop	Versi 12 sp1
suse	linux enterprise workstation extension	Versi 12
suse	linux enterprise workstation extension	Versi 12 sp1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://helpx.adobe.com/security/products/flash-player/apsa16-03.html advisory vendor
https://helpx.adobe.com/security/products/flash-player/apsb16-18.html advisory vendor
https://www.kb.cert.org/vuls/id/748992 advisory pihak ketiga · pemerintah AS
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4171 pemerintah AS
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00031.html mailing list · advisory pihak ketiga
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00035.html mailing list · advisory pihak ketiga
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00038.html mailing list · advisory pihak ketiga
http://www.securityfocus.com/bid/91184 advisory pihak ketiga · vdb entry
http://www.securitytracker.com/id/1036094 advisory pihak ketiga · vdb entry
https://access.redhat.com/errata/RHSA-2016:1238 advisory pihak ketiga
https://security.gentoo.org/glsa/201606-08 advisory pihak ketiga
https://github.com/cisagov/vulnrichment/issues/196 issue tracking

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.