Lucene search

[email protected]CVE-2015-6678

HistorySep 22, 2015 - 10:59 a.m.

CVE-2015-6678

2015-09-2210:59:20

CWE-119

[email protected]

web.nvd.nist.gov

cve-2015-6678

buffer overflow

adobe flash player

security vulnerability

nvd

adobe air

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.035 Low

EPSS

Percentile

91.6%

JSON

Buffer overflow in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-6676.

Affected configurations

NVD

Node

adobeflash_playerRange≤13.0.0.289

adobeflash_playerMatch14.0.0.125

adobeflash_playerMatch14.0.0.145

adobeflash_playerMatch14.0.0.176

adobeflash_playerMatch14.0.0.179

adobeflash_playerMatch15.0.0.152

adobeflash_playerMatch15.0.0.167

adobeflash_playerMatch15.0.0.189

adobeflash_playerMatch15.0.0.223

adobeflash_playerMatch15.0.0.239

adobeflash_playerMatch15.0.0.246

adobeflash_playerMatch16.0.0.235

adobeflash_playerMatch16.0.0.257

adobeflash_playerMatch16.0.0.287

adobeflash_playerMatch16.0.0.296

adobeflash_playerMatch17.0.0.134

adobeflash_playerMatch17.0.0.169

adobeflash_playerMatch17.0.0.188

adobeflash_playerMatch17.0.0.190

adobeflash_playerMatch17.0.0.191

adobeflash_playerMatch18.0.0.160

adobeflash_playerMatch18.0.0.194

adobeflash_playerMatch18.0.0.203

adobeflash_playerMatch18.0.0.209

adobeflash_playerMatch18.0.0.232

AND

applemac_os_xMatch-

microsoftwindowsMatch-

Node

adobeairRange≤18.0.0.199

adobeair_sdkRange≤18.0.0.199

adobeair_sdk_\&_compilerRange≤18.0.0.180

AND

applemac_os_xMatch-

microsoftwindowsMatch-

Node

adobeairRange≤18.0.0.143

AND

googleandroid

Node

adobeflash_playerRange≤11.2.202.508

AND

linuxlinux_kernelMatch-

CPENameOperatorVersion
adobe:flash_playeradobe flash playerle13.0.0.289
adobe:flash_playeradobe flash playereq14.0.0.125
adobe:flash_playeradobe flash playereq14.0.0.145
adobe:flash_playeradobe flash playereq14.0.0.176
adobe:flash_playeradobe flash playereq14.0.0.179
adobe:flash_playeradobe flash playereq15.0.0.152
adobe:flash_playeradobe flash playereq15.0.0.167
adobe:flash_playeradobe flash playereq15.0.0.189
adobe:flash_playeradobe flash playereq15.0.0.223
adobe:flash_playeradobe flash playereq15.0.0.239

CPE	Name	Operator	Version
adobe:flash_player	adobe flash player	le	13.0.0.289
adobe:flash_player	adobe flash player	eq	14.0.0.125
adobe:flash_player	adobe flash player	eq	14.0.0.145
adobe:flash_player	adobe flash player	eq	14.0.0.176
adobe:flash_player	adobe flash player	eq	14.0.0.179
adobe:flash_player	adobe flash player	eq	15.0.0.152
adobe:flash_player	adobe flash player	eq	15.0.0.167
adobe:flash_player	adobe flash player	eq	15.0.0.189
adobe:flash_player	adobe flash player	eq	15.0.0.223
adobe:flash_player	adobe flash player	eq	15.0.0.239