cbcvebase.
CVE-2015-5125
published 2015-08-14

CVE-2015-5125: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and…

critical10CVSS 3.1
AVNACLAuNCCICAC
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.

Affected

6 ranges
VendorProductVersion rangeFixed in
adobeair<= 18.0.0.180
adobeair_sdk<= 18.0.0.180
adobeair_sdk_compiler<= 18.0.0.180
adobeflash_player<= 18.0.0.209
adobeflash_player<= 11.2.202.491
opensuseevergreen

CVSS provenance

nvd10.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv10.0CRITICAL