Lucene search

K
cve[email protected]CVE-2015-7645
HistoryOct 15, 2015 - 10:59 a.m.

CVE-2015-7645

2015-10-1510:59:10
web.nvd.nist.gov
855
In Wild
cve-2015-7645
adobe flash player
remote code execution
vulnerability
swf file
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.7 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.

Affected configurations

NVD
Node
adobeflash_playerRange19.0.0.207
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
adobeflash_playerRange11.2.202.535
AND
linuxlinux_kernelMatch-

References

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.7 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%