Lucene search

AdobeCVE-2015-0305

HistoryJan 13, 2015 - 11:59 p.m.

CVE-2015-0305

2015-01-1323:59:04

adobe

web.nvd.nist.gov

cve-2015-0305

adobe flash player

adobe air

arbitrary code execution

type confusion

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.018

Percentile

88.4%

JSON

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code by leveraging an unspecified “type confusion.”

Affected configurations

Nvd

Node

adobeadobe_air_sdk_and_compilerRange≤15.0.0.356

Node

adobeflash_playerRange≤11.2.202.425

AND

linuxlinux_kernel

Node

adobeadobe_airRange≤15.0.0.356android

Node

adobeadobe_airRange≤15.0.0.356

AND

applemac_os_x

microsoftwindows

Node

adobeadobe_air_sdkRange≤15.0.0.356

Node

adobeflash_playerRange≤13.0.0.259

adobeflash_playerMatch14.0.0.125

adobeflash_playerMatch14.0.0.145

adobeflash_playerMatch14.0.0.176

adobeflash_playerMatch14.0.0.179

adobeflash_playerMatch15.0.0.144

adobeflash_playerMatch15.0.0.152

adobeflash_playerMatch15.0.0.167

adobeflash_playerMatch15.0.0.189

adobeflash_playerMatch15.0.0.223

adobeflash_playerMatch15.0.0.238

adobeflash_playerMatch15.0.0.239

adobeflash_playerMatch15.0.0.246

adobeflash_playerMatch16.0.0.234

adobeflash_playerMatch16.0.0.235

AND

applemac_os_x

microsoftwindows

VendorProductVersionCPE
adobeadobe_air_sdk_and_compiler*cpe:2.3:a:adobe:adobe_air_sdk_and_compiler:*:*:*:*:*:*:*:*
adobeflash_player*cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
adobeadobe_air*cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:android:*:*
adobeadobe_air*cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
adobeadobe_air_sdk*cpe:2.3:a:adobe:adobe_air_sdk:*:*:*:*:*:*:*:*
adobeflash_player14.0.0.125cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*
adobeflash_player14.0.0.145cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	adobe_air_sdk_and_compiler	*	cpe:2.3:a:adobe:adobe_air_sdk_and_compiler::::::::
adobe	flash_player	*	cpe:2.3:a:adobe:flash_player::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
adobe	adobe_air	*	cpe:2.3:a:adobe:adobe_air::::::android::*
adobe	adobe_air	*	cpe:2.3:a:adobe:adobe_air::::::::
apple	mac_os_x	*	cpe:2.3:o:apple:mac_os_x::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
adobe	adobe_air_sdk	*	cpe:2.3:a:adobe:adobe_air_sdk::::::::
adobe	flash_player	14.0.0.125	cpe:2.3:a:adobe:flash_player:14.0.0.125:::::::*
adobe	flash_player	14.0.0.145	cpe:2.3:a:adobe:flash_player:14.0.0.145:::::::*