Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-7643
HistoryOct 15, 2015 - 12:00 a.m.

CVE-2015-7643

2015-10-1500:00:11
[email protected]
web.nvd.nist.gov
47
cve-2015-7643
adobe flash player
use-after-free vulnerability
arbitrary code execution
security vulnerability
adobe air

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.032

Percentile

91.2%

JSON

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Video object with a crafted deblocking property, a different vulnerability than CVE-2015-7629, CVE-2015-7631, and CVE-2015-7644.

Affected configurations

NVD
Node
adobeflash_playerRange≤19.0.0.185
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
adobeairRange≤19.0.0.190
AND
googleandroid
Node
adobeflash_playerRange≤11.2.202.521
AND
linuxlinux_kernelMatch-
Node
adobeairRange≤19.0.0.190
OR
adobeair_sdkRange≤19.0.0.190
OR
adobeair_sdk_\&_compilerRange≤19.0.0.190
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
VendorProductVersionCPE
adobeflash_playercpe:/a:adobe:flash_player::::

Related

prion 12
nvd 12
cve 11
ubuntucve 12
cvelist 12
zdi 3
nessus 14
suse 4
altlinux 2
redhat 2
freebsd 1
openvas 8
archlinux 1
mageia 1
checkpoint_advisories 3
kaspersky 1
gentoo 1
prion
prion
Design/Logic Flaw
2015-10-15 00:00:00
Design/Logic Flaw
2015-10-15 00:00:00
Design/Logic Flaw
2015-10-15 00:00:00
nvd
nvd
CVE-2015-7644
2015-10-15 00:00:12
CVE-2015-7643
2015-10-15 00:00:11
CVE-2015-7629
2015-10-15 00:00:03
cve
cve
CVE-2015-7629
2015-10-15 00:00:03
CVE-2015-7644
2015-10-15 00:00:12
CVE-2015-7631
2015-10-15 00:00:06
ubuntucve
ubuntucve
CVE-2015-7644
2015-10-15 00:00:00
CVE-2015-7631
2015-10-15 00:00:00
CVE-2015-7629
2015-10-15 00:00:00
cvelist
cvelist
CVE-2015-7643
2015-10-14 23:00:00
CVE-2015-7644
2015-10-14 23:00:00
CVE-2015-7631
2015-10-14 23:00:00
zdi
zdi
Adobe Flash AS2 Video deblocking Use-After-Free Remote Code Execution Vulnerability
2015-10-13 00:00:00
Adobe Flash TextFormat tabStops Use-After-Free Remote Code Execution Vulnerability
2015-10-13 00:00:00
Adobe Flash TextLine validity Use-After-Free Remote Code Execution Vulnerability
2015-10-13 00:00:00
nessus
nessus
FreeBSD : flash -- multiple vulnerabilities (a63f2c06-726b-11e5-a12b-bcaec565249c)
2015-10-15 00:00:00
Adobe Flash Player <= 19.0.0.185 Multiple Vulnerabilities (APSB15-25)
2015-10-13 00:00:00
Adobe AIR for Mac <= 19.0.0.190 Multiple Vulnerabilities (APSB15-25)
2015-10-14 00:00:00
suse
suse
Security update for Adobe Flash Player (important)
2015-10-14 18:09:47
Security update for flash-player (important)
2015-10-14 17:11:22
Security update for flash-player (important)
2015-10-14 17:10:32
altlinux
altlinux
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt54
2015-10-14 00:00:00
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt54
2015-10-14 00:00:00
redhat
redhat
(RHSA-2015:1893) Critical: flash-plugin security update
2015-10-15 00:00:00
(RHSA-2015:2024) Critical: flash-plugin security update
2015-11-11 00:00:00
freebsd
freebsd
flash -- multiple vulnerabilities
2015-10-13 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0399)
2015-10-15 00:00:00
SUSE: Security Advisory for flash-player (SUSE-SU-2015:1740-1)
2015-10-16 00:00:00
Adobe Air Multiple Vulnerabilities -01 (Oct 2015) - Mac OS X
2015-10-16 00:00:00
archlinux
archlinux
flashplugin: multiple issues
2015-10-14 00:00:00
mageia
mageia
Updated flash-player-plugin packages fixes security vulnerabilities
2015-10-14 08:55:15
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Use After Free Code Execution (APSB15-25: CVE-2015-7631)
2015-10-29 00:00:00
Adobe Flash Player Use After Free Code Execution (APSB15-25: CVE-2015-7629)
2015-10-29 00:00:00
Adobe Flash Player Memory Corruption (APSB15-23: CVE-2015-5574; CVE-2015-7644)
2015-09-29 00:00:00
kaspersky
kaspersky
KLA10679 Multiple vulnerabilities in Adobe Flash Player & AIR
2015-10-13 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2015-11-17 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.032

Percentile

91.2%

JSON
Related for CVE-2015-7643
prion12nvd12cve11ubuntucve12cvelist12zdi3nessus14suse4altlinux2redhat2freebsd1openvas8archlinux1mageia1checkpoint_advisories3kaspersky1gentoo1