Vulnerability CVE-2015-0312


Published: 2015-01-28   Modified: 2015-01-29

Description:
Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16.0.0.296 on Windows and OS X and before 11.2.202.440 on Linux allows attackers to execute arbitrary code via unspecified vectors.

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Microsoft -> Windows 
Linux -> Linux kernel 
Apple -> Mac os x 
Adobe -> Flash player 

 References:
http://helpx.adobe.com/security/products/flash-player/apsb15-03.html
http://www.securityfocus.com/bid/72343
http://www.securitytracker.com/id/1031634
https://exchange.xforce.ibmcloud.com/vulnerabilities/100394
https://technet.microsoft.com/library/security/2755801

Copyright 2024, cxsecurity.com

 

Back to Top