Lucene search

K
cve[email protected]CVE-2015-5129
HistoryAug 14, 2015 - 1:59 a.m.

CVE-2015-5129

2015-08-1401:59:20
CWE-119
web.nvd.nist.gov
38
cve-2015-5129
heap-based buffer overflow
adobe flash player
adobe air
security vulnerability
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.06 Low

EPSS

Percentile

93.5%

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5541.

Affected configurations

NVD
Node
adobeflash_playerRange11.2.202.491
AND
linuxlinux_kernelMatch-
Node
adobeairRange18.0.0.180
OR
adobeair_sdkRange18.0.0.180
OR
adobeair_sdk_\&_compilerRange18.0.0.180
Node
opensuseevergreenMatch11.4
Node
adobeflash_playerRange18.0.0.209
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.06 Low

EPSS

Percentile

93.5%