CVEvulnerability
CVE-2015-3085
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-05-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-264
Description
Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3083.
Affected configurations
• adobe air (<= 17.0.0.144)
• adobe air sdk (<= 17.0.0.144)
• adobe air sdk \& compiler (<= 17.0.0.144)
• adobe flash player (<= 13.0.0.264)
• adobe flash player 14.0.0.125
• adobe flash player 14.0.0.145
• adobe flash player 14.0.0.176
• adobe flash player 14.0.0.179
• adobe flash player 15.0.0.152
• adobe flash player 15.0.0.167
• adobe flash player 15.0.0.189
• adobe flash player 15.0.0.223
• adobe flash player 15.0.0.239
• adobe flash player 15.0.0.246
• adobe flash player 16.0.0.235
• adobe flash player 16.0.0.257
• adobe flash player 16.0.0.287
• adobe flash player 16.0.0.296
• adobe flash player 17.0.0.134
• adobe flash player 17.0.0.169
• adobe flash player (<= 11.2.202.475)
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00007.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00010.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00016.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-1005.html rhn.redhat.com
- http://www.securityfocus.com/bid/74610 www.securityfocus.com
- http://www.securitytracker.com/id/1032285 www.securitytracker.com
- http://www.zerodayinitiative.com/advisories/ZDI-15-216 www.zerodayinitiative.com
- http://www.zerodayinitiative.com/advisories/ZDI-15-216/ www.zerodayinitiative.com
- https://helpx.adobe.com/security/products/flash-player/apsb15-09.html Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201505-02 security.gentoo.org
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00007.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00010.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00016.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-1005.html rhn.redhat.com
- http://www.securityfocus.com/bid/74610 www.securityfocus.com
- http://www.securitytracker.com/id/1032285 www.securitytracker.com
- http://www.zerodayinitiative.com/advisories/ZDI-15-216 www.zerodayinitiative.com
- http://www.zerodayinitiative.com/advisories/ZDI-15-216/ www.zerodayinitiative.com
- https://helpx.adobe.com/security/products/flash-player/apsb15-09.html Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201505-02 security.gentoo.org