CVE-2015-5575

2015-09-2210:59:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2015-5575

adobe flash player

memory corruption

vulnerability

nvd

cve

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.117 Low

EPSS

Percentile

95.3%

JSON

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, and CVE-2015-6677.

CPENameOperatorVersion
adobe:airadobe airle18.0.0.143
google:androidgoogle androideq*
adobe:flash_playeradobe flash playerle13.0.0.289
adobe:flash_playeradobe flash playereq14.0.0.125
adobe:flash_playeradobe flash playereq14.0.0.145
adobe:flash_playeradobe flash playereq14.0.0.176
adobe:flash_playeradobe flash playereq14.0.0.179
adobe:flash_playeradobe flash playereq15.0.0.152
adobe:flash_playeradobe flash playereq15.0.0.167
adobe:flash_playeradobe flash playereq15.0.0.189

CPE	Name	Operator	Version
adobe:air	adobe air	le	18.0.0.143
google:android	google android	eq	*
adobe:flash_player	adobe flash player	le	13.0.0.289
adobe:flash_player	adobe flash player	eq	14.0.0.125
adobe:flash_player	adobe flash player	eq	14.0.0.145
adobe:flash_player	adobe flash player	eq	14.0.0.176
adobe:flash_player	adobe flash player	eq	14.0.0.179
adobe:flash_player	adobe flash player	eq	15.0.0.152
adobe:flash_player	adobe flash player	eq	15.0.0.167
adobe:flash_player	adobe flash player	eq	15.0.0.189