CVE-2015-0301
Summary
| CVE | CVE-2015-0301 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2015-01-13 23:59:00 UTC |
| Updated | 2017-09-08 01:29:00 UTC |
| Description | Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Adobe | Adobe Air | All | All | All | All |
| Application | Adobe | Adobe Air | All | All | All | All |
| Application | Adobe | Adobe Air Sdk | All | All | All | All |
| Application | Adobe | Adobe Air Sdk And Compiler | All | All | All | All |
| Application | Adobe | Flash Player | 11.2.202.425 | All | All | All |
| Application | Adobe | Flash Player | 14.0.0.125 | All | All | All |
| Application | Adobe | Flash Player | 14.0.0.145 | All | All | All |
| Application | Adobe | Flash Player | 14.0.0.176 | All | All | All |
| Application | Adobe | Flash Player | 14.0.0.179 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.144 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.152 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.167 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.189 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.223 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.238 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.239 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.246 | All | All | All |
| Application | Adobe | Flash Player | 16.0.0.234 | All | All | All |
| Application | Adobe | Flash Player | 16.0.0.235 | All | All | All |
| Application | Adobe | Flash Player | 11.2.202.425 | All | All | All |
| Application | Adobe | Flash Player | 14.0.0.125 | All | All | All |
| Application | Adobe | Flash Player | 14.0.0.145 | All | All | All |
| Application | Adobe | Flash Player | 14.0.0.176 | All | All | All |
| Application | Adobe | Flash Player | 14.0.0.179 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.144 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.152 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.167 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.189 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.223 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.238 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.239 | All | All | All |
| Application | Adobe | Flash Player | 15.0.0.246 | All | All | All |
| Application | Adobe | Flash Player | 16.0.0.234 | All | All | All |
| Application | Adobe | Flash Player | 16.0.0.235 | All | All | All |
| Application | Adobe | Flash Player | All | All | All | All |
| Operating System | Apple | Mac Os X | All | All | All | All |
| Operating System | Apple | Mac Os X | All | All | All | All |
| Operating System | Linux | Linux Kernel | All | All | All | All |
| Operating System | Linux | Linux Kernel | All | All | All | All |
| Operating System | Microsoft | Windows | All | All | All | All |
| Operating System | Microsoft | Windows | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Adobe Flash Player and AIR CVE-2015-0301 Unspecified Security Vulnerability | BID | www.securityfocus.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Gentoo Security | GENTOO | security.gentoo.org | |
| Security Advisory SA62187 - Adobe AIR Multiple Vulnerabilities - Secunia | SECUNIA | secunia.com | |
| Security Advisory SA62177 - Adobe Flash Player Multiple Vulnerabilities - Secunia | SECUNIA | secunia.com | |
| Adobe Security Bulletin | CONFIRM | helpx.adobe.com | Vendor Advisory |
| Security Advisory SA62371 - SUSE update for flash-player - Secunia | SECUNIA | secunia.com | |
| Adobe Flash Player Bugs Let Remote Users Execute Arbitrary Code and Obtain Potentially Sensitive Information - SecurityTracker | SECTRACK | www.securitytracker.com | |
| Security Advisory SA62740 - SUSE update for flash-player - Secunia | SECUNIA | secunia.com | |
| Security Advisory SA62252 - Red Hat update for flash-plugin - Secunia | SECUNIA | secunia.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.