CVE-2015-7645

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi Dipakai ransomware EPSS 65,3%

Kerentanan pada adobe flash player, opensuse evergreen +8 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD. Masuk katalog KEV CISA pada 3 Maret 2022, artinya sudah terbukti dieksploitasi. Tercatat dipakai dalam kampanye ransomware.

Deskripsi (NVD)

Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.

Rincian

Terbit di NVD

15 Oktober 2015

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

65,3% peluang dieksploitasi; lebih tinggi dari 99,2% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Adobe Flash Player Arbitrary Code Execution Vulnerability

Masuk KEV

3 Maret 2022

Tenggat CISA

24 Maret 2022 (untuk instansi federal AS)

Ransomware

Tercatat dipakai dalam kampanye ransomware

Tindakan wajib

The impacted product is end-of-life and should be disconnected if still in use.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpx.adobe.com/security/products/flash-player/apsa15-05.html broken link · patch · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-7645 pemerintah AS
• http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00015.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00016.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00017.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html mailing list · advisory pihak ketiga
• http://packetstormsecurity.com/files/134009/Adobe-Flash-IExternalizable.writeExternal-Type-Confusion.html advisory pihak ketiga · vdb entry
• http://rhn.redhat.com/errata/RHSA-2015-1913.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2015-2024.html advisory pihak ketiga
• http://www.securityfocus.com/bid/77081 broken link · advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1033850 broken link · advisory pihak ketiga · vdb entry
• https://security.gentoo.org/glsa/201511-02 advisory pihak ketiga
• https://www.exploit-db.com/exploits/38490/ advisory pihak ketiga · vdb entry
• http://blog.trendmicro.com/trendlabs-security-intelligence/new-adobe-flash-zero-day-used-in-pawn-storm-campaig... broken link
• https://helpx.adobe.com/security/products/flash-player/apsb15-27.html broken link