CVE-2015-8651

Katalog CVE

CVSS 8.8 · High KEV · sudah dieksploitasi EPSS 67,7%

Kerentanan Integer Overflow or Wraparound pada adobe air sdk, adobe air sdk & compiler +15 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD. Masuk katalog KEV CISA pada 25 Mei 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.

Rincian

Terbit di NVD

28 Desember 2015

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

67,7% peluang dieksploitasi; lebih tinggi dari 99,3% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Adobe Flash Player Integer Overflow Vulnerability

Masuk KEV

25 Mei 2022

Tenggat CISA

15 Juni 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

The impacted product is end-of-life and should be disconnected if still in use.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpx.adobe.com/security/products/flash-player/apsb16-01.html not applicable · patch · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-8651 pemerintah AS
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00045.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00046.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00047.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00048.html mailing list · advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2015-2697.html advisory pihak ketiga
• http://www.securityfocus.com/bid/79705 broken link · advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1034544 broken link · advisory pihak ketiga · vdb entry
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388 advisory pihak ketiga
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 advisory pihak ketiga
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 advisory pihak ketiga
• https://security.gentoo.org/glsa/201601-03 advisory pihak ketiga