Fält | 14/05/2018 08:41 | 30/06/2022 16:27 | 30/06/2022 16:35 |
---|
type | Multimedia Player Software | Multimedia Player Software | Multimedia Player Software |
vendor | Adobe | Adobe | Adobe |
name | Flash Player | Flash Player | Flash Player |
version | <=11.2.202.548/18.0.0.261/19.0.0.245 | <=11.2.202.548/18.0.0.261/19.0.0.245 | <=11.2.202.548/18.0.0.261/19.0.0.245 |
risk | 2 | 2 | 2 |
historic | 0 | 0 | 0 |
cvss2_vuldb_basescore | 6.8 | 6.8 | 6.8 |
cvss2_vuldb_tempscore | 5.9 | 5.9 | 5.9 |
cvss2_vuldb_av | N | N | N |
cvss2_vuldb_ac | M | M | M |
cvss2_vuldb_au | N | N | N |
cvss2_vuldb_ci | P | P | P |
cvss2_vuldb_ii | P | P | P |
cvss2_vuldb_ai | P | P | P |
cvss3_meta_basescore | 7.3 | 7.3 | 7.3 |
cvss3_meta_tempscore | 7.0 | 7.0 | 7.0 |
cvss3_vuldb_basescore | 7.3 | 7.3 | 7.3 |
cvss3_vuldb_tempscore | 7.0 | 7.0 | 7.0 |
date | 1449532800 (08/12/2015) | 1449532800 (08/12/2015) | 1449532800 (08/12/2015) |
location | Website | Website | Website |
type | Advisory | Advisory | Advisory |
url | https://helpx.adobe.com/security/products/flash-player/apsb15-32.html | https://helpx.adobe.com/security/products/flash-player/apsb15-32.html | https://helpx.adobe.com/security/products/flash-player/apsb15-32.html |
identifier | APSB15-32 | APSB15-32 | APSB15-32 |
disputed | 0 | 0 | 0 |
price_0day | $25k-$100k | $25k-$100k | $25k-$100k |
price_trend | - | - | - |
name | Upgrade | Upgrade | Upgrade |
date | 1449532800 (08/12/2015) | 1449532800 (08/12/2015) | 1449532800 (08/12/2015) |
upgrade_version | 11.2.202.554/18.0.0.268/20.0.0.228/20.0.0.235 | 11.2.202.554/18.0.0.268/20.0.0.228/20.0.0.235 | 11.2.202.554/18.0.0.268/20.0.0.228/20.0.0.235 |
cve | CVE-2015-8071 | CVE-2015-8071 | CVE-2015-8071 |
cve_nvd_published | 1449705600 | 1449705600 | 1449705600 |
securityfocus | 78715 | 78715 | 78715 |
securityfocus_title | Adobe Flash Player and AIR APSB15-32 Multiple Use After Free Remote Code Execution Vulnerabilities | Adobe Flash Player and AIR APSB15-32 Multiple Use After Free Remote Code Execution Vulnerabilities | Adobe Flash Player and AIR APSB15-32 Multiple Use After Free Remote Code Execution Vulnerabilities |
sectracker | 1034318 | 1034318 | 1034318 |
sectracker_date | 1449532800 (08/12/2015) | 1449532800 (08/12/2015) | 1449532800 (08/12/2015) |
sectracker_cause | Access control error | Access control error | Access control error |
vulnerabilitycenter | 55003 | 55003 | 55003 |
vulnerabilitycenter_title | [APSB15-32] Adobe Flash Player, AIR, AIR SDK and AIR SDK and Compiler Remote Code Execution - CVE-2015-8071 | [APSB15-32] Adobe Flash Player, AIR, AIR SDK and AIR SDK and Compiler Remote Code Execution - CVE-2015-8071 | [APSB15-32] Adobe Flash Player, AIR, AIR SDK and AIR SDK and Compiler Remote Code Execution - CVE-2015-8071 |
vulnerabilitycenter_severity | Critical | Critical | Critical |
vulnerabilitycenter_creationdate | 1449619200 | 1449619200 | 1449619200 |
vulnerabilitycenter_lastupdate | 1510617600 | 1510617600 | 1510617600 |
vulnerabilitycenter_reportingdate | 1449532800 | 1449532800 | 1449532800 |
nessus_id | 87243 | 87243 | 87243 |
nessus_name | Adobe AIR <= 19.0.0.241 Multiple Vulnerabilities (APSB15-32) | Adobe AIR <= 19.0.0.241 Multiple Vulnerabilities (APSB15-32) | Adobe AIR <= 19.0.0.241 Multiple Vulnerabilities (APSB15-32) |
nessus_filename | adobe_air_apsb15-32.nasl | adobe_air_apsb15-32.nasl | adobe_air_apsb15-32.nasl |
nessus_risk | High | High | High |
nessus_family | Windows | Windows | Windows |
nessus_type | local | local | local |
nessus_date | 1449532800 (08/12/2015) | 1449532800 (08/12/2015) | 1449532800 (08/12/2015) |
openvas_id | 803456 | 803456 | 803456 |
openvas_filename | gb_adobe_air_mult_vuln_dec15_win.nasl | gb_adobe_air_mult_vuln_dec15_win.nasl | gb_adobe_air_mult_vuln_dec15_win.nasl |
openvas_title | Adobe Air Multiple Vulnerabilities Dec15 (Windows) | Adobe Air Multiple Vulnerabilities Dec15 (Windows) | Adobe Air Multiple Vulnerabilities Dec15 (Windows) |
openvas_family | General | General | General |
seealso | 79654 79655 79656 79657 79658 79659 79660 79661 79662 79663 79664 79665 79666 79667 79668 79669 79670 79671 79672 79673 79674 79675 79676 79677 79678 79679 79680 79681 79682 79683 | 79654 79655 79656 79657 79658 79659 79660 79661 79662 79663 79664 79665 79666 79667 79668 79669 79670 79671 79672 79673 79674 79675 79676 79677 79678 79679 79680 79681 79682 79683 | 79654 79655 79656 79657 79658 79659 79660 79661 79662 79663 79664 79665 79666 79667 79668 79669 79670 79671 79672 79673 79674 79675 79676 79677 79678 79679 79680 79681 79682 79683 |
cwe | 416 (minneskorruption) | 416 (minneskorruption) | 416 (minneskorruption) |
cvss3_vuldb_ac | L | L | L |
cvss3_vuldb_ui | N | N | N |
cvss2_vuldb_e | ND | ND | ND |
cvss2_vuldb_rl | OF | OF | OF |
cvss2_vuldb_rc | C | C | C |
cvss3_vuldb_e | X | X | X |
cvss3_vuldb_rl | O | O | O |
cvss3_vuldb_rc | C | C | C |
cvss3_vuldb_av | N | N | N |
cvss3_vuldb_pr | N | N | N |
cvss3_vuldb_s | U | U | U |
cvss3_vuldb_c | L | L | L |
cvss3_vuldb_i | L | L | L |
cvss3_vuldb_a | L | L | L |
cvss2_nvd_av | N | N | N |
cvss2_nvd_ac | L | L | L |
cvss2_nvd_au | N | N | N |
cvss2_nvd_ci | C | C | C |
cvss2_nvd_ii | C | C | C |
cvss2_nvd_ai | C | C | C |
person_name | Natalie Silvanovich | Natalie Silvanovich | Natalie Silvanovich |
company_name | Zero Day Initiative | Zero Day Initiative | Zero Day Initiative |
confirm_url | https://helpx.adobe.com/security/products/flash-player/apsb15-32.html | https://helpx.adobe.com/security/products/flash-player/apsb15-32.html | https://helpx.adobe.com/security/products/flash-player/apsb15-32.html |
cve_assigned | 1446422400 (02/11/2015) | 1446422400 (02/11/2015) | 1446422400 (02/11/2015) |
securityfocus_date | 1449532800 (08/12/2015) | 1449532800 (08/12/2015) | 1449532800 (08/12/2015) |
securityfocus_class | Unknown | Unknown | Unknown |
cve_nvd_summary | | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454. | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454. |
cvss2_nvd_basescore | | 10.0 | 10.0 |
exploitdb | | | 39042 |