Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveAdobeCVE-2015-3086
HistoryMay 13, 2015 - 11:00 a.m.

CVE-2015-3086

2015-05-1311:00:17
adobe
web.nvd.nist.gov
41
cve
adobe flash player
arbitrary code execution
type confusion
vulnerability

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.056

Percentile

93.3%

JSON

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified “type confusion,” a different vulnerability than CVE-2015-3077 and CVE-2015-3084.

Affected configurations

Nvd
Node
adobeflash_playerRange≤13.0.0.264
OR
adobeflash_playerMatch14.0.0.125
OR
adobeflash_playerMatch14.0.0.145
OR
adobeflash_playerMatch14.0.0.176
OR
adobeflash_playerMatch14.0.0.179
OR
adobeflash_playerMatch15.0.0.152
OR
adobeflash_playerMatch15.0.0.167
OR
adobeflash_playerMatch15.0.0.189
OR
adobeflash_playerMatch15.0.0.223
OR
adobeflash_playerMatch15.0.0.239
OR
adobeflash_playerMatch15.0.0.246
OR
adobeflash_playerMatch16.0.0.235
OR
adobeflash_playerMatch16.0.0.257
OR
adobeflash_playerMatch16.0.0.287
OR
adobeflash_playerMatch16.0.0.296
OR
adobeflash_playerMatch17.0.0.134
OR
adobeflash_playerMatch17.0.0.169
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
adobeairRange≤17.0.0.144
OR
adobeair_sdkRange≤17.0.0.144
OR
adobeair_sdk_\&_compilerRange≤17.0.0.144
Node
adobeflash_playerRange≤11.2.202.475
AND
linuxlinux_kernelMatch-
VendorProductVersionCPE
adobeflash_player*cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
adobeflash_player14.0.0.125cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*
adobeflash_player14.0.0.145cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*
adobeflash_player14.0.0.176cpe:2.3:a:adobe:flash_player:14.0.0.176:*:*:*:*:*:*:*
adobeflash_player14.0.0.179cpe:2.3:a:adobe:flash_player:14.0.0.179:*:*:*:*:*:*:*
adobeflash_player15.0.0.152cpe:2.3:a:adobe:flash_player:15.0.0.152:*:*:*:*:*:*:*
adobeflash_player15.0.0.167cpe:2.3:a:adobe:flash_player:15.0.0.167:*:*:*:*:*:*:*
adobeflash_player15.0.0.189cpe:2.3:a:adobe:flash_player:15.0.0.189:*:*:*:*:*:*:*
adobeflash_player15.0.0.223cpe:2.3:a:adobe:flash_player:15.0.0.223:*:*:*:*:*:*:*
adobeflash_player15.0.0.239cpe:2.3:a:adobe:flash_player:15.0.0.239:*:*:*:*:*:*:*
Rows per page:
1-10 of 231

Related

ubuntucve 3
nvd 3
cvelist 3
cve 2
prion 3
checkpoint_advisories 3
googleprojectzero 2
nessus 16
redhat 1
openvas 8
kaspersky 2
securityvulns 1
suse 3
freebsd 1
mageia 1
altlinux 2
gentoo 1
ubuntucve
ubuntucve
CVE-2015-3077
2015-05-13 00:00:00
CVE-2015-3086
2015-05-13 00:00:00
CVE-2015-3084
2015-05-13 00:00:00
nvd
nvd
CVE-2015-3086
2015-05-13 11:00:17
CVE-2015-3084
2015-05-13 11:00:15
CVE-2015-3077
2015-05-13 11:00:10
cvelist
cvelist
CVE-2015-3086
2015-05-13 10:00:00
CVE-2015-3077
2015-05-13 10:00:00
CVE-2015-3084
2015-05-13 10:00:00
cve
cve
CVE-2015-3084
2015-05-13 11:00:15
CVE-2015-3077
2015-05-13 11:00:10
prion
prion
Type confusion
2015-05-13 11:00:00
Type confusion
2015-05-13 11:00:00
Type confusion
2015-05-13 11:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Type Confusion (APSB15-09: CVE-2015-3086)
2015-06-02 00:00:00
Adobe Flash Player Type Confusion (APSB15-09: CVE-2015-3084)
2015-06-08 00:00:00
Adobe Flash Player Type Confusion (APSB15-09: CVE-2015-3077)
2015-05-17 00:00:00
googleprojectzero
googleprojectzero
One Perfect Bug: Exploiting Type Confusion in Flash
2015-07-20 00:00:00
Attacking ECMAScript Engines with Redefinition
2015-08-17 00:00:00
nessus
nessus
RHEL 5 / 6 : flash-plugin (RHSA-2015:1005)
2015-05-13 00:00:00
Google Chrome < 42.0.2311.152 Multiple Vulnerabilities
2015-06-16 00:00:00
Google Chrome < 42.0.2311.152 Multiple Vulnerabilities (Mac OS X)
2015-05-12 00:00:00
redhat
redhat
(RHSA-2015:1005) Critical: flash-plugin security update
2015-05-13 00:00:00
openvas
openvas
Adobe Flash Player Multiple Vulnerabilities - 01 (May 2015) - Linux
2015-05-15 00:00:00
Adobe Air Multiple Vulnerabilities - 01 (May 2015) - Mac OS X
2015-05-15 00:00:00
Adobe Air Multiple Vulnerabilities - 01 (May 2015) - Windows
2015-05-15 00:00:00
kaspersky
kaspersky
KLA10574 Multiple vulnerabilities in Adobe Flash Player
2015-05-12 00:00:00
KLA10576 Flash Player update for Google Chrome
2015-05-12 00:00:00
securityvulns
securityvulns
Adobe Flash Player multiple security vulnerabilities
2015-05-13 00:00:00
suse
suse
Security update for flash-player (important)
2015-05-16 00:05:04
Security update for flash-player (important)
2015-05-14 20:04:55
Security update for flash-player (important)
2015-05-19 17:04:53
freebsd
freebsd
Adobe Flash Player -- critical vulnerabilities
2015-05-12 00:00:00
mageia
mageia
Updated flash-player-plugin packages fix security vulnerabilities
2015-05-12 22:37:48
altlinux
altlinux
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt44
2015-05-15 00:00:00
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt44
2015-05-15 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2015-05-31 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.056

Percentile

93.3%

JSON
Related for CVE-2015-3086
ubuntucve3nvd3cvelist3cve2prion3checkpoint_advisories3googleprojectzero2nessus16redhat1openvas8kaspersky2securityvulns1suse3freebsd1mageia1altlinux2gentoo1