CVE-2015-0312

2015-01-2822:59:00

CWE-415

[email protected]

web.nvd.nist.gov

cve-2015-0312

adobe flash player

vulnerability

double free

arbitrary code execution

nvd

windows

os x

linux

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.026 Low

EPSS

Percentile

90.2%

JSON

Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16.0.0.296 on Windows and OS X and before 11.2.202.440 on Linux allows attackers to execute arbitrary code via unspecified vectors.

CPENameOperatorVersion
adobe:flash_playeradobe flash playerle11.2.202.438
adobe:flash_playeradobe flash playerle16.0.0.287
adobe:flash_playeradobe flash playerle13.0.0.262
adobe:flash_player_desktop_runtimeadobe flash player desktop runtimele16.0.0.287

CPE	Name	Operator	Version
adobe:flash_player	adobe flash player	le	11.2.202.438
adobe:flash_player	adobe flash player	le	16.0.0.287
adobe:flash_player	adobe flash player	le	13.0.0.262
adobe:flash_player_desktop_runtime	adobe flash player desktop runtime	le	16.0.0.287