← CVE Radar
CVE-2015-8651Adobe Flash Player Integer Overflow Vulnerability
Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.
8.8 HIGHEPSS 67.69%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 9.3 | HIGH | 2.0NVD | AV:N/AC:M/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Jun 15, 2022
The impacted product is end-of-life and should be disconnected if still in use.
Details
- CVE ID
- CVE-2015-8651
- Status
- Analyzed
- Assigner (CNA)
- adobe
- Published
- Dec 28, 2015
- Last modified
- 2026-06-17 00:34 UTC
Affected Products
From NVD CPE configurations.
adobeair sdk1 version range
- before 20.0.0.233
adobeair sdk & compiler1 version range
- before 20.0.0.233
adobeflash player3 version ranges
- before 11.2.202.559
- before 18.0.0.324
- 19.0.0.185 before 20.0.0.267
adobeair1 version range
- before 20.0.0.233
redhatenterprise linux desktop2 version ranges
- 5.0
- 6.0
redhatenterprise linux server2 version ranges
- 5.0
- 6.0
redhatenterprise linux workstation2 version ranges
- 5.0
- 6.0
opensuseevergreen1 version range
- 11.4
opensuseopensuse2 version ranges
- 13.1
- 13.2
suselinux enterprise desktop4 version ranges
- 11 sp3
- 11 sp4
- 12
- 12 sp1
suselinux enterprise workstation extension2 version ranges
- 12
- 12 sp1
hpinsight control1 version range
- before 7.6
hpinsight control server provisioning1 version range
- before 7.6
hpmatrix operating environment1 version range
- 7.6
hpsystem management homepage1 version range
- before 7.6
hpsystems insight manager1 version range
- before 7.6
hpversion control repository manager1 version range
- before 7.6
References
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00045.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00046.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00047.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00048.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2015-2697.html
- securityfocus.com http://www.securityfocus.com/bid/79705
- securitytracker.com http://www.securitytracker.com/id/1034544
- h20566.www2.hpe.com https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
- h20566.www2.hpe.com https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680
- h20566.www2.hpe.com https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
- helpx.adobe.com https://helpx.adobe.com/security/products/flash-player/apsb16-01.html
- security.gentoo.org https://security.gentoo.org/glsa/201601-03
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-8651