Executive Summary

Informations
Name CVE-2015-8436 First vendor Publication 2015-12-10
Vendor Cve Last vendor Modification 2017-02-17

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score 9.3 Attack Range Network
Cvss Impact Score 10 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Use-after-free vulnerability in the PrintJob object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted addPage arguments, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8436

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 33
Application 21
Application 374

Snort® IPS/IDS

Date Description
2016-03-14 Adobe Flash Player PrintJob object use-after-free attempt
RuleID : 37091 - Revision : 4 - Type : FILE-FLASH
2016-03-14 Adobe Flash Player PrintJob object use-after-free attempt
RuleID : 37090 - Revision : 4 - Type : FILE-FLASH
2016-03-14 Adobe Flash Player PrintJob object use-after-free attempt
RuleID : 37089 - Revision : 3 - Type : FILE-FLASH
2016-03-14 Adobe Flash Player PrintJob object use-after-free attempt
RuleID : 37088 - Revision : 3 - Type : FILE-FLASH

Nessus® Vulnerability Scanner

Date Description
2016-01-27 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201601-03.nasl - Type : ACT_GATHER_INFO
2016-01-04 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2015-882.nasl - Type : ACT_GATHER_INFO
2015-12-11 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2015-2236-1.nasl - Type : ACT_GATHER_INFO
2015-12-11 Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2015-2247-1.nasl - Type : ACT_GATHER_INFO
2015-12-10 Name : The remote Red Hat host is missing a security update.
File : redhat-RHSA-2015-2593.nasl - Type : ACT_GATHER_INFO
2015-12-09 Name : The remote FreeBSD host is missing one or more security-related updates.
File : freebsd_pkg_c8842a849ddd11e58c2fc485083ca99c.nasl - Type : ACT_GATHER_INFO
2015-12-08 Name : The remote Windows host has a browser plugin installed that is affected by mu...
File : adobe_air_apsb15-32.nasl - Type : ACT_GATHER_INFO
2015-12-08 Name : The remote Windows host has a browser plugin installed that is affected by mu...
File : flash_player_apsb15-32.nasl - Type : ACT_GATHER_INFO
2015-12-08 Name : The remote Windows host contains a web browser that is affected by multiple v...
File : google_chrome_47_0_2526_80.nasl - Type : ACT_GATHER_INFO
2015-12-08 Name : The remote Mac OS X host has a browser plugin installed that is affected by m...
File : macosx_adobe_air_apsb15-32.nasl - Type : ACT_GATHER_INFO
2015-12-08 Name : The remote Mac OS X host has a browser plugin installed that is affected by m...
File : macosx_flash_player_apsb15-32.nasl - Type : ACT_GATHER_INFO
2015-12-08 Name : The remote Mac OS X host contains a web browser that is affected by multiple ...
File : macosx_google_chrome_47_0_2526_80.nasl - Type : ACT_GATHER_INFO
2015-12-08 Name : The remote Windows host has a browser plugin installed that is affected by mu...
File : smb_kb3119147.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/78715
CONFIRM https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_n...
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_n...
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_n...
https://helpx.adobe.com/security/products/flash-player/apsb15-32.html
GENTOO https://security.gentoo.org/glsa/201601-03
MISC http://zerodayinitiative.com/advisories/ZDI-15-603
SECTRACK http://www.securitytracker.com/id/1034318
SUSE http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00008.html
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00012.html

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
Date Informations
2020-05-24 01:16:54
  • Multiple Updates
2020-05-23 00:47:34
  • Multiple Updates
2019-09-27 12:07:51
  • Multiple Updates
2019-08-27 12:07:44
  • Multiple Updates
2019-07-30 12:07:41
  • Multiple Updates
2019-07-28 12:03:57
  • Multiple Updates
2019-07-17 12:07:36
  • Multiple Updates
2019-06-15 12:07:18
  • Multiple Updates
2018-12-14 12:04:29
  • Multiple Updates
2018-10-30 12:08:17
  • Multiple Updates
2018-07-05 12:01:49
  • Multiple Updates
2018-03-02 01:02:13
  • Multiple Updates
2017-09-08 12:05:31
  • Multiple Updates
2017-02-17 09:23:54
  • Multiple Updates
2017-02-08 09:31:30
  • Multiple Updates
2016-12-20 09:24:45
  • Multiple Updates
2016-12-07 21:24:59
  • Multiple Updates
2016-11-29 00:25:38
  • Multiple Updates
2016-11-04 12:03:23
  • Multiple Updates
2016-10-18 12:04:49
  • Multiple Updates
2016-10-15 12:04:20
  • Multiple Updates
2016-09-21 12:02:17
  • Multiple Updates
2016-07-14 12:01:43
  • Multiple Updates
2016-06-29 01:09:10
  • Multiple Updates
2016-04-27 03:09:47
  • Multiple Updates
2016-03-26 00:23:32
  • Multiple Updates
2016-01-28 13:25:57
  • Multiple Updates
2016-01-05 13:26:29
  • Multiple Updates
2015-12-12 13:26:48
  • Multiple Updates
2015-12-11 17:29:09
  • Multiple Updates
2015-12-11 13:26:17
  • Multiple Updates
2015-12-10 13:25:12
  • Multiple Updates
2015-12-10 09:25:59
  • First insertion