Ubuntu.comUB:CVE-2015-0309CVE-2015-0309
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.074 Low
EPSS
Percentile
94.0%
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x
through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429
on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before
16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK &
Compiler before 16.0.0.272 allows attackers to execute arbitrary code via
unspecified vectors, a different vulnerability than CVE-2015-0304.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 12.04 | noarch | adobe-flashplugin | < 11.2.202.429-0precise1 | UNKNOWN |
| ubuntu | 14.04 | noarch | adobe-flashplugin | < 11.2.202.429-0trusty1 | UNKNOWN |
| ubuntu | 14.10 | noarch | adobe-flashplugin | < 11.2.202.429-0utopic1 | UNKNOWN |
| ubuntu | 12.04 | noarch | flashplugin-nonfree | < 11.2.202.429ubuntu0.12.04.1 | UNKNOWN |
| ubuntu | 14.04 | noarch | flashplugin-nonfree | < 11.2.202.429ubuntu0.14.04.1 | UNKNOWN |
| ubuntu | 14.10 | noarch | flashplugin-nonfree | < 11.2.202.429ubuntu0.14.10.1 | UNKNOWN |
Related
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.074 Low
EPSS
Percentile
94.0%