CVE-2015-3111

2015-06-2410:59:04

CWE-119

adobe

web.nvd.nist.gov

cve-2015-3111

adobe photoshop

adobe bridge

buffer overflow

arbitrary code execution

security vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.02

Percentile

88.9%

JSON

Heap-based buffer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors.

Affected configurations

Nvd

Node

adobebridgeRange≤6.1

AND

applemac_os_x

microsoftwindows

Node

adobephotoshop_ccRange≤15.2.2

AND

applemac_os_x

microsoftwindows

VendorProductVersionCPE
adobebridge*cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
adobephotoshop_cc*cpe:2.3:a:adobe:photoshop_cc:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	bridge	*	cpe:2.3:a:adobe:bridge::::::::
apple	mac_os_x	*	cpe:2.3:o:apple:mac_os_x::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
adobe	photoshop_cc	*	cpe:2.3:a:adobe:photoshop_cc::::::::