Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-0309
HistoryJan 13, 2015 - 11:59 p.m.

CVE-2015-0309

2015-01-1323:59:07
CWE-119
[email protected]
web.nvd.nist.gov
33
cve-2015-0309
adobe flash player
buffer overflow
security vulnerability
arbitrary code execution
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.173

Percentile

96.1%

JSON

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0304.

Affected configurations

NVD
Node
adobeadobe_airRange≤15.0.0.356android
Node
adobeadobe_air_sdk_and_compilerRange≤15.0.0.356
Node
adobeflash_playerRange≤13.0.0.259
OR
adobeflash_playerMatch14.0.0.125
OR
adobeflash_playerMatch14.0.0.145
OR
adobeflash_playerMatch14.0.0.176
OR
adobeflash_playerMatch14.0.0.179
OR
adobeflash_playerMatch15.0.0.144
OR
adobeflash_playerMatch15.0.0.152
OR
adobeflash_playerMatch15.0.0.167
OR
adobeflash_playerMatch15.0.0.189
OR
adobeflash_playerMatch15.0.0.223
OR
adobeflash_playerMatch15.0.0.238
OR
adobeflash_playerMatch15.0.0.239
OR
adobeflash_playerMatch15.0.0.246
OR
adobeflash_playerMatch16.0.0.234
OR
adobeflash_playerMatch16.0.0.235
AND
applemac_os_x
OR
microsoftwindows
Node
adobeflash_playerMatch11.2.202.425
AND
linuxlinux_kernel
Node
adobeadobe_airRange≤15.0.0.356
AND
applemac_os_x
OR
microsoftwindows
Node
adobeadobe_air_sdkRange≤15.0.0.356
VendorProductVersionCPE
adobeadobe_aircpe:/a:adobe:adobe_air::::

Related

nvd 2
ubuntucve 2
cvelist 2
cve 1
prion 2
checkpoint_advisories 2
nessus 15
suse 5
archlinux 2
redhat 1
openvas 9
securityvulns 1
kaspersky 1
freebsd 1
mageia 1
gentoo 1
nvd
nvd
CVE-2015-0309
2015-01-13 23:59:07
CVE-2015-0304
2015-01-13 23:59:03
ubuntucve
ubuntucve
CVE-2015-0304
2015-01-13 00:00:00
CVE-2015-0309
2015-01-13 00:00:00
cvelist
cvelist
CVE-2015-0304
2015-01-13 23:00:00
CVE-2015-0309
2015-01-13 23:00:00
cve
cve
CVE-2015-0304
2015-01-13 23:59:03
prion
prion
Heap overflow
2015-01-13 23:59:00
Heap overflow
2015-01-13 23:59:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Heap Buffer Overflow (APSB15-01: CVE-2015-0309)
2015-01-29 00:00:00
Adobe Flash Player Buffer Overflow (APSB15-01: CVE-2015-0304)
2015-01-26 00:00:00
nessus
nessus
Adobe AIR for Mac <= 15.0.0.356 Multiple Vulnerabilities (APSB15-01)
2015-01-13 00:00:00
Flash Player <= 16.0.0.235 Multiple Vulnerabilities (APSB15-01)
2015-03-27 00:00:00
MS KB3024663: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer
2015-01-13 00:00:00
suse
suse
Security update for flash-player (important)
2015-01-15 17:05:15
flashplayer to version 11.2.202.429 (important)
2015-01-15 22:04:43
Security update for flash-player (important)
2015-01-16 01:04:46
archlinux
archlinux
flashplugin: multiple issues
2014-01-15 00:00:00
flashplugin: multiple issues
2015-01-23 00:00:00
redhat
redhat
(RHSA-2015:0052) Critical: flash-plugin security update
2015-01-14 00:00:00
openvas
openvas
Adobe AIR Multiple Vulnerabilities-01 (Jan 2015) - Windows
2015-01-16 00:00:00
Adobe AIR Multiple Vulnerabilities-01 (Jan 2015) - Mac OS X
2015-01-16 00:00:00
Adobe Flash Player Multiple Vulnerabilities-01 (Jan 2015) - Mac OS X
2015-01-16 00:00:00
securityvulns
securityvulns
Adobe Flash Player multiple security vulnerabilities
2015-01-19 00:00:00
kaspersky
kaspersky
KLA10439 Multiple vulnerabilities in Adobe products
2015-01-13 00:00:00
freebsd
freebsd
Adobe Flash Player -- multiple vulnerabilities
2015-01-13 00:00:00
mageia
mageia
Updated flash-player-plugin packages fix security vulnerabilities
2015-01-15 00:55:48
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2015-02-06 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.173

Percentile

96.1%

JSON
Related for CVE-2015-0309
nvd2ubuntucve2cvelist2cve1prion2checkpoint_advisories2nessus15suse5archlinux2redhat1openvas9securityvulns1kaspersky1freebsd1mageia1gentoo1