10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.973 High
EPSS
Percentile
99.8%
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x
and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on
Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before
15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK &
Compiler before 15.0.0.249 allows attackers to execute arbitrary code via
unspecified vectors, a different vulnerability than CVE-2014-0559.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 12.04 | noarch | adobe-flashplugin | < 11.2.202.406-0precise1 | UNKNOWN |
ubuntu | 14.04 | noarch | adobe-flashplugin | < 11.2.202.406-0trusty1 | UNKNOWN |
ubuntu | 12.04 | noarch | flashplugin-nonfree | < 11.2.202.406ubuntu0.12.04.1 | UNKNOWN |
ubuntu | 14.04 | noarch | flashplugin-nonfree | < 11.2.202.406ubuntu0.14.04.1 | UNKNOWN |