10

CVE-2015-0301

Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AdobeAdobe Air Sdk And Compiler Version <= 15.0.0.356
AdobeAdobe Air SwPlatformandroid Version <= 15.0.0.356
AdobeAdobe Air Version <= 15.0.0.356
   ApplemacOS X
   MicrosoftWindows
AdobeAdobe Air Sdk Version <= 15.0.0.356
AdobeFlash Player Version11.2.202.425
   LinuxLinux Kernel
AdobeFlash Player Version <= 13.0.0.259
   ApplemacOS X
   MicrosoftWindows
AdobeFlash Player Version14.0.0.125
   ApplemacOS X
   MicrosoftWindows
AdobeFlash Player Version14.0.0.145
   ApplemacOS X
   MicrosoftWindows
AdobeFlash Player Version14.0.0.176
   ApplemacOS X
   MicrosoftWindows
AdobeFlash Player Version14.0.0.179
   ApplemacOS X
   MicrosoftWindows
AdobeFlash Player Version15.0.0.144
   ApplemacOS X
   MicrosoftWindows
AdobeFlash Player Version15.0.0.152
   ApplemacOS X
   MicrosoftWindows
AdobeFlash Player Version15.0.0.167
   ApplemacOS X
   MicrosoftWindows
AdobeFlash Player Version15.0.0.189
   ApplemacOS X
   MicrosoftWindows
AdobeFlash Player Version15.0.0.223
   ApplemacOS X
   MicrosoftWindows
AdobeFlash Player Version15.0.0.238
   ApplemacOS X
   MicrosoftWindows
AdobeFlash Player Version15.0.0.239
   ApplemacOS X
   MicrosoftWindows
AdobeFlash Player Version15.0.0.246
   ApplemacOS X
   MicrosoftWindows
AdobeFlash Player Version16.0.0.234
   ApplemacOS X
   MicrosoftWindows
AdobeFlash Player Version16.0.0.235
   ApplemacOS X
   MicrosoftWindows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.4% 0.912
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.