CVE-2015-8641

Published: 28/12/2015 Updated: 17/02/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in Adobe Flash Player prior to 18.0.0.324 and 19.x and 20.x prior to 20.0.0.267 on Windows and OS X and prior to 11.2.202.559 on Linux, Adobe AIR prior to 20.0.0.233, Adobe AIR SDK prior to 20.0.0.233, and Adobe AIR SDK & Compiler prior to 20.0.0.233 allows malicious users to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe air sdk
adobe air sdk & compiler
adobe flash player
adobe air
adobe flash player 19.0.0.185
adobe flash player 19.0.0.207
adobe flash player 19.0.0.226
adobe flash player 19.0.0.245
adobe flash player 20.0.0.228
adobe flash player 20.0.0.235

Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An updated Adobe Flash Player package that fixes multiple security issuesis now available for Red Hat Enterprise Linux 5 and 6 SupplementaryRed Hat Product Security has rated this update as having Critical secur ...

Use-after-free vulnerability in Adobe Flash Player before 1800324 and 19x and 20x before 2000267 on Windows and OS X and before 112202559 on Linux, Adobe AIR before 2000233, Adobe AIR SDK before 2000233, and Adobe AIR SDK & Compiler before 2000233 allows attackers to execute arbitrary code via unspecified vectors, a differen ...

NVD-CWE-Other https://helpx.adobe.com/security/products/flash-player/apsb16-01.html http://www.securityfocus.com/bid/79701 http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00047.html http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00048.html https://security.gentoo.org/glsa/201601-03 http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00046.html http://rhn.redhat.com/errata/RHSA-2015-2697.html http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00045.html http://www.securitytracker.com/id/1034544 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 https://access.redhat.com/errata/RHSA-2015:2697 https://nvd.nist.gov

CVE-2015-8641

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect