CVE-2015-7643

2015-10-1500:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2015-7643

adobe flash player

use-after-free vulnerability

arbitrary code execution

security vulnerability

adobe air

7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.022 Low

EPSS

Percentile

89.3%

JSON

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Video object with a crafted deblocking property, a different vulnerability than CVE-2015-7629, CVE-2015-7631, and CVE-2015-7644.

CPENameOperatorVersion
adobe:flash_playeradobe flash playerle19.0.0.185
adobe:airadobe airle19.0.0.190
adobe:flash_playeradobe flash playerle11.2.202.521
adobe:air_sdkadobe air sdkle19.0.0.190
adobe:air_sdk_\&_compileradobe air sdk \& compilerle19.0.0.190

CPE	Name	Operator	Version
adobe:flash_player	adobe flash player	le	19.0.0.185
adobe:air	adobe air	le	19.0.0.190
adobe:flash_player	adobe flash player	le	11.2.202.521
adobe:air_sdk	adobe air sdk	le	19.0.0.190
adobe:air_sdk_\&_compiler	adobe air sdk \& compiler	le	19.0.0.190