CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
90.3%
Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16.0.0.296 on Windows and OS X and before 11.2.202.440 on Linux allows attackers to execute arbitrary code via unspecified vectors.
Vendor | Product | Version | CPE |
---|---|---|---|
adobe | flash_player | * | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* |
linux | linux_kernel | - | cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* |
microsoft | internet_explorer | 10 | cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:* |
microsoft | internet_explorer | 11 | cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:* |
microsoft | windows_8 | - | cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:* |
microsoft | windows_8.1 | - | cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* |
adobe | flash_player | * | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:chrome:*:* |
apple | macos | - | cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* |
microsoft | windows | - | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
adobe | flash_player | * | cpe:2.3:a:adobe:flash_player:*:*:*:*:extended_support:*:*:* |
helpx.adobe.com/security/products/flash-player/apsb15-03.html
secunia.com/advisories/62432
secunia.com/advisories/62543
secunia.com/advisories/62660
www.securityfocus.com/bid/72343
www.securitytracker.com/id/1031634
exchange.xforce.ibmcloud.com/vulnerabilities/100394
technet.microsoft.com/library/security/2755801