Details of VAR-201502-0355

ID

VAR-201502-0355

CVE

CVE-2015-0331

TITLE

Adobe Flash Player Vulnerable to arbitrary code execution

Trust: 0.8

sources: JVNDB: JVNDB-2015-001555

DESCRIPTION

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322. This vulnerability CVE-2015-0313 , CVE-2015-0315 , CVE-2015-0320 ,and CVE-2015-0322 Is a different vulnerability. Supplementary information : CWE Vulnerability type by CWE-416: Use-after-free ( Use of freed memory ) Has been identified. http://cwe.mitre.org/data/definitions/416.htmlAn attacker could execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the processing of an invalid m3u8 playlist. By manipulating this playlist an attacker can force a dangling pointer to be reused after it has been freed. Failed exploit attempts will likely cause a denial-of-service condition. The product enables viewing of applications, content and video across screens and browsers

Trust: 2.7

sources: NVD: CVE-2015-0331 // JVNDB: JVNDB-2015-001555 // ZDI: ZDI-15-047 // BID: 72698 // VULHUB: VHN-78277 // VULMON: CVE-2015-0331

AFFECTED PRODUCTS

vendor:	adobe	model:	flash player	scope:	eq	version:	16.0.0.296	Trust: 1.9
vendor:	adobe	model:	flash player	scope:	eq	version:	15.0.0.246	Trust: 1.9
vendor:	adobe	model:	flash player	scope:	eq	version:	15.0.0.239	Trust: 1.9
vendor:	adobe	model:	flash player	scope:	eq	version:	15.0.0.223	Trust: 1.9
vendor:	adobe	model:	flash player	scope:	eq	version:	15.0.0.189	Trust: 1.9
vendor:	adobe	model:	flash player	scope:	eq	version:	14.0.0.145	Trust: 1.9
vendor:	adobe	model:	flash player	scope:	eq	version:	14.0.0.125	Trust: 1.9
vendor:	adobe	model:	flash player	scope:	eq	version:	16.0.0.235	Trust: 1.6
vendor:	adobe	model:	flash player	scope:	eq	version:	14.0.0.176	Trust: 1.6
vendor:	adobe	model:	flash player	scope:	eq	version:	16.0.0.287	Trust: 1.3
vendor:	adobe	model:	flash player	scope:	eq	version:	16.0.0.257	Trust: 1.3
vendor:	adobe	model:	flash player	scope:	eq	version:	15.0.0.152	Trust: 1.3
vendor:	adobe	model:	flash player	scope:	eq	version:	14.0.0.179	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	lte	version:	11.2.202.440	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	15.0.0.167	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	lte	version:	13.0.0.264	Trust: 1.0
vendor:	adobe	model:	flash player	scope:	eq	version:	13.0.0.264	Trust: 0.9
vendor:	google	model:	chrome	scope:	lt	version:	40.0.2214.115 (windows/machintosh/linux)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	lt	version:	11.2.202.442 (linux)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	lt	version:	16.0.0.305 (internet explorer 10/11)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	lt	version:	16.0.0.305 (windows/machintosh/linux edition chrome)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	lt	version:	desktop runtime 16.0.0.305 (windows/macintosh)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	lt	version:	continuous support release 13.0.0.269 (windows/macintosh)	Trust: 0.8
vendor:	microsoft	model:	internet explorer	scope:	eq	version:	10 (windows 8/windows server 2012/windows rt)	Trust: 0.8
vendor:	microsoft	model:	internet explorer	scope:	eq	version:	11 (windows 8.1/windows server 2012 r2/windows rt 8.1)	Trust: 0.8
vendor:	adobe	model:	flash player	scope:	-	version:	-	Trust: 0.7
vendor:	adobe	model:	flash player	scope:	eq	version:	16.0235	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	14.0179	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	14.0177	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	14.0176	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	13.0259	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	13.0252	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	13.0214	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	13.0182	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.20295	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202418	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202400	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202359	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202350	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202346	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202341	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202297	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202280	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202238	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202236	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202221	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202197	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202160	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.11569	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.11554	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.11164	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.11150	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.0.198	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.0.160	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.0.1129	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.53.64	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.51.66	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.452	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.3218	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.22.87	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.15.3	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.12.36	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.12.35	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.262	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.2460	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.152.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.151.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.124.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.9.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.8.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.48.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.47.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.45.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.31.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.289.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.283.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.280	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.28.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.277.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.262.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.260.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.246.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.159.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.155.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0.115.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	9	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	8.0.35.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	8.0.34.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	8	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.73.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.70.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.69.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.68.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.67.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.66.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.61.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.60.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.53.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.24.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.19.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	7.0.14.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	7	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	6.0.79	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	6.0.21.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	6	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	4	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	3	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	2	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	16.0.0.291	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	16.0.0.234	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	15.0.0.242	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	13.0.0.262	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	13.0.0.260	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	13.0.0.258	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	13.0.0.250	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	13.0.0.244	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	13.0.0.241	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	13.0.0.231	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	13.0.0.223	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	13.0.0.206	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	13.0.0.201	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.440	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.438	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.429	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.424	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.411	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.406	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.394	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.378	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.356	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.336	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.335	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.332	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.327	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.310	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.291	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.285	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.275	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.273	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.270	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.262	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.261	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.258	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.251	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.243	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.238	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.235	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.233	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.229	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.228	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.2.202.223	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.115.81	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.115.8	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.115.7	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.115.63	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.115.6	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.115.59	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.115.58	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.115.48	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.115.34	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.115.11	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.112.61	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.111.9	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.111.8	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.111.73	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.111.7	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.111.6	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.111.54	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.111.5	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.111.44	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.111.10	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.102.63	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.102.62	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.102.59	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.102.55	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1.102.228	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.1	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.0.1.153	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.0.1.152	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11.0	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	11	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.186.7	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.186.6	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.186.3	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.186.2	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.185.25	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.185.24	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.185.23	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.185.22	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.185.21	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.86	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.75	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.7	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.68	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.67	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.63	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.61	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.51	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.50	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.5	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.48	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.43	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.4	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.29	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.25	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.23	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.20	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.19	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.18	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.16	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.15	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.11	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.183.10	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.181.34	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.181.26	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.181.23	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.181.22	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.181.16	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.3.181.14	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.159.1	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.157.51	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.156.12	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.154.28	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.154.27	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.154.25	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.154.24	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.154.18	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.154.13	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.153.1	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.152.33	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.152.32	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.152.26	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.152.21	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.2.152	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.95.2	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.95.1	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.92.8	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.92.10	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.85.3	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.82.76	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.52.15	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.52.14.1	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.52.14	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.106.17	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.106.16	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.105.6	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.102.65	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1.102.64	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.1	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.42.34	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.32.18	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10.0.2.54	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	eq	version:	10	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	ne	version:	16.0.0.305	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	ne	version:	13.0.0.269	Trust: 0.3
vendor:	adobe	model:	flash player	scope:	ne	version:	11.2.202.442	Trust: 0.3

sources: ZDI: ZDI-15-047 // BID: 72698 // JVNDB: JVNDB-2015-001555 // CNNVD: CNNVD-201502-381 // NVD: CVE-2015-0331

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2015-0331
value:	HIGH
Trust: 1.0
NVD:	CVE-2015-0331
value:	HIGH
Trust: 0.8
ZDI:	CVE-2015-0331
value:	MEDIUM
Trust: 0.7
CNNVD:	CNNVD-201502-381
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-78277
value:	HIGH
Trust: 0.1
VULMON:	CVE-2015-0331
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2015-0331
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
ZDI:	CVE-2015-0331
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.7
VULHUB:	VHN-78277
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: ZDI: ZDI-15-047 // VULHUB: VHN-78277 // VULMON: CVE-2015-0331 // JVNDB: JVNDB-2015-001555 // CNNVD: CNNVD-201502-381 // NVD: CVE-2015-0331

PROBLEMTYPE DATA

problemtype:	NVD-CWE-Other	Trust: 1.0
problemtype:	CWE-Other	Trust: 0.8

sources: JVNDB: JVNDB-2015-001555 // NVD: CVE-2015-0331

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201502-381

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-201502-381

CONFIGURATIONS

sources: JVNDB: JVNDB-2015-001555

PATCH

title:	APSB15-04	url:	https://helpx.adobe.com/security/products/flash-player/apsb15-04.html	Trust: 1.5
title:	APSB15-04	url:	http://helpx.adobe.com/jp/security/products/flash-player/apsb15-04.html	Trust: 0.8
title:	Google Chrome	url:	https://www.google.com/intl/ja/chrome/browser/features.html	Trust: 0.8
title:	Stable Channel Update	url:	http://googlechromereleases.blogspot.jp/2015/02/stable-channel-update_19.html	Trust: 0.8
title:	Update for Vulnerabilities in Adobe Flash Player in Internet Explorer (2755801)	url:	https://technet.microsoft.com/en-us/library/security/2755801	Trust: 0.8
title:	RHSA-2015:0140	url:	https://rhn.redhat.com/errata/RHSA-2015-0140.html	Trust: 0.8
title:	Internet Explorer 上の Adobe Flash Player の脆弱性に対応する更新プログラム (2755801)	url:	https://technet.microsoft.com/ja-jp/library/security/2755801	Trust: 0.8
title:	アドビシステムズ社 Adobe Flash Player の脆弱性に関するお知らせ	url:	http://www.fmworld.net/biz/common/adobe/20150209f.html	Trust: 0.8
title:	Red Hat: CVE-2015-0331	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database&qid=CVE-2015-0331	Trust: 0.1
title:	Red Hat: Critical: flash-plugin security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20150140 - Security Advisory	Trust: 0.1
title:	CVE-Study	url:	https://github.com/thdusdl1219/CVE-Study	Trust: 0.1

sources: ZDI: ZDI-15-047 // VULMON: CVE-2015-0331 // JVNDB: JVNDB-2015-001555

EXTERNAL IDS

db:	NVD	id:	CVE-2015-0331	Trust: 3.6
db:	BID	id:	72698	Trust: 1.5
db:	ZDI	id:	ZDI-15-047	Trust: 1.0
db:	JVNDB	id:	JVNDB-2015-001555	Trust: 0.8
db:	ZDI_CAN	id:	ZDI-CAN-2625	Trust: 0.7
db:	CNNVD	id:	CNNVD-201502-381	Trust: 0.7
db:	VULHUB	id:	VHN-78277	Trust: 0.1
db:	VULMON	id:	CVE-2015-0331	Trust: 0.1

sources: ZDI: ZDI-15-047 // VULHUB: VHN-78277 // VULMON: CVE-2015-0331 // BID: 72698 // JVNDB: JVNDB-2015-001555 // CNNVD: CNNVD-201502-381 // NVD: CVE-2015-0331

REFERENCES

url:	https://helpx.adobe.com/security/products/flash-player/apsb15-04.html	Trust: 2.8
url:	http://www.securityfocus.com/bid/72698	Trust: 1.2
url:	http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html	Trust: 1.2
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-0331	Trust: 0.8
url:	http://www.ipa.go.jp/security/ciadr/vul/20150206-adobeflashplayer.html	Trust: 0.8
url:	http://www.jpcert.or.jp/at/2015/at150005.html	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-0331	Trust: 0.8
url:	http://www.npa.go.jp/cyberpolice/topics/?seq=15322	Trust: 0.8
url:	https://www.adobe.com/software/flash/about/	Trust: 0.3
url:	http://www.zerodayinitiative.com/advisories/zdi-15-047/	Trust: 0.3
url:	https://cwe.mitre.org/data/definitions/.html	Trust: 0.1
url:	http://tools.cisco.com/security/center/viewalert.x?alertid=37532	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: ZDI: ZDI-15-047 // VULHUB: VHN-78277 // VULMON: CVE-2015-0331 // BID: 72698 // JVNDB: JVNDB-2015-001555 // CNNVD: CNNVD-201502-381 // NVD: CVE-2015-0331

CREDITS

bilou

Trust: 0.7

sources: ZDI: ZDI-15-047

SOURCES

db:	ZDI	id:	ZDI-15-047
db:	VULHUB	id:	VHN-78277
db:	VULMON	id:	CVE-2015-0331
db:	BID	id:	72698
db:	JVNDB	id:	JVNDB-2015-001555
db:	CNNVD	id:	CNNVD-201502-381
db:	NVD	id:	CVE-2015-0331

LAST UPDATE DATE

2025-04-13T23:29:38.837000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-15-047	date:	2015-02-19T00:00:00
db:	VULHUB	id:	VHN-78277	date:	2017-01-03T00:00:00
db:	VULMON	id:	CVE-2015-0331	date:	2017-01-03T00:00:00
db:	BID	id:	72698	date:	2015-02-19T00:00:00
db:	JVNDB	id:	JVNDB-2015-001555	date:	2015-03-03T00:00:00
db:	CNNVD	id:	CNNVD-201502-381	date:	2015-02-26T00:00:00
db:	NVD	id:	CVE-2015-0331	date:	2025-04-12T10:46:40.837

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-15-047	date:	2015-02-19T00:00:00
db:	VULHUB	id:	VHN-78277	date:	2015-02-21T00:00:00
db:	VULMON	id:	CVE-2015-0331	date:	2015-02-21T00:00:00
db:	BID	id:	72698	date:	2015-02-19T00:00:00
db:	JVNDB	id:	JVNDB-2015-001555	date:	2015-02-24T00:00:00
db:	CNNVD	id:	CNNVD-201502-381	date:	2015-02-26T00:00:00
db:	NVD	id:	CVE-2015-0331	date:	2015-02-21T11:59:00.060