CVE-2015-0311
CRITICAL
9,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH
10,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete
Description
AI Translation Available
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,9274
Percentile
1,0th
Updated
EPSS Score Trend (Last 90 Days)
Exploit
Adobe Flash Player - ByteArray UncompressViaZlibVariant Use-After-Free (Metasploit)
Verified Metasploit Framework (MSF)Adobe Flash Player - ByteArray UncompressViaZlibVariant Use-After-Free (Metasploit)
View Exploit Code →
Operating System
Linux Enterprise Workstation Extension by Suse
CPE Identifier
View Detailed Analysis
cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Flash Player by Adobe
Version Range Affected
To
13.0.0.262
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Linux Enterprise Desktop by Suse
CPE Identifier
View Detailed Analysis
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Flash Player by Adobe
Version Range Affected
From
14.0.0.125
(inclusive)
To
16.0.0.287
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Flash Player by Adobe
Version Range Affected
To
11.2.202.438
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Edge by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Linux Enterprise Desktop by Suse
CPE Identifier
View Detailed Analysis
cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Internet Explorer by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Internet Explorer by Microsoft
CPE Identifier
View Detailed Analysis
cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://github.com/cisagov/vulnrichment/issues/196
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015…
http://helpx.adobe.com/security/products/flash-player/apsa15-01.html
http://helpx.adobe.com/security/products/flash-player/apsb15-03.html
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00027.html
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00031.html
http://malware.dontneedcoffee.com/2015/01/unpatched-vulnerability-0day-in-flash…
http://secunia.com/advisories/62432
http://secunia.com/advisories/62543
http://secunia.com/advisories/62650
http://secunia.com/advisories/62660
http://secunia.com/advisories/62740
http://security.gentoo.org/glsa/glsa-201502-02.xml
https://technet.microsoft.com/library/security/2755801
http://www.securityfocus.com/bid/72283
http://www.securitytracker.com/id/1031597
http://helpx.adobe.com/security/products/flash-player/apsa15-01.html
http://helpx.adobe.com/security/products/flash-player/apsb15-03.html
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00027.html
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00031.html
http://malware.dontneedcoffee.com/2015/01/unpatched-vulnerability-0day-in-flash…
http://secunia.com/advisories/62432
http://secunia.com/advisories/62543
http://secunia.com/advisories/62650
http://secunia.com/advisories/62660
http://secunia.com/advisories/62740
http://security.gentoo.org/glsa/glsa-201502-02.xml
https://technet.microsoft.com/library/security/2755801
http://www.securityfocus.com/bid/72283
http://www.securitytracker.com/id/1031597