CVE-2015-3103HIGH
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3106 and CVE-2015-3107.
References
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00011.html
http://rhn.redhat.com/errata/RHSA-2015-1086.html
http://www.securityfocus.com/bid/75087
http://www.securitytracker.com/id/1032519
https://helpx.adobe.com/security/products/flash-player/apsb15-11.html
Details
Source: MITRE
Published: 2015-06-10
Updated: 2016-12-31
Type: NVD-CWE-Other
Risk Information
CVSS v2
Base Score: 10
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Impact Score: 10
Exploitability Score: 10
Severity: HIGH
Vulnerable Software
Configuration 1
AND
OR
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:14.0.0.176:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:14.0.0.179:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:15.0.0.152:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:15.0.0.167:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:15.0.0.189:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:15.0.0.223:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:15.0.0.239:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:15.0.0.246:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:16.0.0.235:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:16.0.0.257:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:16.0.0.287:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:16.0.0.296:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:17.0.0.134:*:*:*:*:*:*:*
OR
Configuration 2
AND
OR
OR
Configuration 3
AND
OR
cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*
OR
Configuration 4
AND
OR
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 8835 | Adobe AIR < 18.0.0.144 Multiple Vulnerabilities (APSB15-11) | Nessus Network Monitor | Web Clients | high |
| 8814 | Flash Player < 17.0.0.189 (inferred) Multiple Vulnerabilities (APSB15-06 through 11) | Nessus Network Monitor | Web Clients | high |
| 8813 | Flash Player < 13.0.0.292 / 18.0.0.160 Multiple Vulnerabilities (APSB15-11) | Nessus Network Monitor | Web Clients | high |
| 84315 | GLSA-201506-01 : Adobe Flash Player: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | critical |
| 8783 | Google Chrome < 43.0.2357.124 Multiple Vulnerabilities | Nessus Network Monitor | Web Clients | high |
| 84207 | SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1064-1) | Nessus | SuSE Local Security Checks | critical |
| 84162 | Adobe AIR for Mac <= 17.0.0.172 Multiple Vulnerabilities (APSB15-11) | Nessus | MacOS X Local Security Checks | critical |
| 84158 | Adobe AIR <= 17.0.0.172 Multiple Vulnerabilities (APSB15-11) | Nessus | Windows | critical |
| 84147 | SUSE SLED12 Security Update : flash-player (SUSE-SU-2015:1043-1) | Nessus | SuSE Local Security Checks | critical |
| 84135 | openSUSE Security Update : Adobe Flash Player (openSUSE-2015-412) | Nessus | SuSE Local Security Checks | critical |
| 84132 | FreeBSD : Adobe Flash Player -- critical vulnerabilities (1e63db88-1050-11e5-a4df-c485083ca99c) | Nessus | FreeBSD Local Security Checks | critical |
| 84111 | RHEL 5 / 6 : flash-plugin (RHSA-2015:1086) | Nessus | Red Hat Local Security Checks | critical |
| 84052 | MS KB3065820: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer | Nessus | Windows | critical |
| 84051 | Google Chrome < 43.0.2357.124 Multiple Vulnerabilities (Mac OS X) | Nessus | MacOS X Local Security Checks | critical |
| 84050 | Adobe Flash Player <= 17.0.0.188 Multiple Vulnerabilities (APSB15-11) (Mac OS X) | Nessus | MacOS X Local Security Checks | critical |
| 84049 | Google Chrome < 43.0.2357.124 Multiple Vulnerabilities | Nessus | Windows | critical |
| 84048 | Adobe Flash Player <= 17.0.0.188 Multiple Vulnerabilities (APSB15-11) | Nessus | Windows | critical |