CVE-2015-0302

2015-01-1323:59:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve

adobe flash player

adobe air

keystroke information

security vulnerability

nvd

5.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

77.6%

JSON

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to obtain sensitive keystroke information via unspecified vectors.

CPENameOperatorVersion
adobe:flash_playeradobe flash playereq11.2.202.425
adobe:adobe_airadobe adobe airle15.0.0.356
adobe:adobe_air_sdkadobe adobe air sdkle15.0.0.356
adobe:flash_playeradobe flash playerle13.0.0.259
adobe:flash_playeradobe flash playereq14.0.0.125
adobe:flash_playeradobe flash playereq14.0.0.145
adobe:flash_playeradobe flash playereq14.0.0.176
adobe:flash_playeradobe flash playereq14.0.0.179
adobe:flash_playeradobe flash playereq15.0.0.144
adobe:flash_playeradobe flash playereq15.0.0.152

CPE	Name	Operator	Version
adobe:flash_player	adobe flash player	eq	11.2.202.425
adobe:adobe_air	adobe adobe air	le	15.0.0.356
adobe:adobe_air_sdk	adobe adobe air sdk	le	15.0.0.356
adobe:flash_player	adobe flash player	le	13.0.0.259
adobe:flash_player	adobe flash player	eq	14.0.0.125
adobe:flash_player	adobe flash player	eq	14.0.0.145
adobe:flash_player	adobe flash player	eq	14.0.0.176
adobe:flash_player	adobe flash player	eq	14.0.0.179
adobe:flash_player	adobe flash player	eq	15.0.0.144
adobe:flash_player	adobe flash player	eq	15.0.0.152