Lucene search

[email protected]NVD:CVE-2015-8446

HistoryDec 10, 2015 - 6:00 a.m.

CVE-2015-8446

2015-12-1006:00:10

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.1

Confidence

High

EPSS

0.926

Percentile

99.1%

JSON

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via an MP3 file with COMM tags that are mishandled during memory allocation, a different vulnerability than CVE-2015-8438.

Affected configurations

Nvd

Node

adobeflash_playerRange≤11.2.202.548

AND

linuxlinux_kernel

Node

adobeflash_playerRange≤18.0.0.261

adobeflash_playerMatch19.0.0.185

adobeflash_playerMatch19.0.0.207

adobeflash_playerMatch19.0.0.226

adobeflash_playerMatch19.0.0.245

AND

applemac_os_x

microsoftwindows

Node

adobeairRange≤19.0.0.241

AND

applemac_os_x

microsoftwindows

Node

adobeair_sdkRange≤19.0.0.241

adobeair_sdk_\&_compilerRange≤19.0.0.241

AND

appleiphone_os

applemac_os_x

googleandroid

microsoftwindows

VendorProductVersionCPE
adobeflash_player*cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
adobeflash_player19.0.0.185cpe:2.3:a:adobe:flash_player:19.0.0.185:*:*:*:*:*:*:*
adobeflash_player19.0.0.207cpe:2.3:a:adobe:flash_player:19.0.0.207:*:*:*:*:*:*:*
adobeflash_player19.0.0.226cpe:2.3:a:adobe:flash_player:19.0.0.226:*:*:*:*:*:*:*
adobeflash_player19.0.0.245cpe:2.3:a:adobe:flash_player:19.0.0.245:*:*:*:*:*:*:*
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
adobeair*cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*
adobeair_sdk*cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	flash_player	*	cpe:2.3:a:adobe:flash_player::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
adobe	flash_player	19.0.0.185	cpe:2.3:a:adobe:flash_player:19.0.0.185:::::::*
adobe	flash_player	19.0.0.207	cpe:2.3:a:adobe:flash_player:19.0.0.207:::::::*
adobe	flash_player	19.0.0.226	cpe:2.3:a:adobe:flash_player:19.0.0.226:::::::*
adobe	flash_player	19.0.0.245	cpe:2.3:a:adobe:flash_player:19.0.0.245:::::::*
apple	mac_os_x	*	cpe:2.3:o:apple:mac_os_x::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
adobe	air	*	cpe:2.3:a:adobe:air::::::::
adobe	air_sdk	*	cpe:2.3:a:adobe:air_sdk::::::::