Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-5577

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5575, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, and CVE-2015-6677.

Security Impact Summary

CVE-2015-5577 is a security vulnerability that . Impacting 8 products from adobe, from google, from adobe and 5 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2015, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.

Published

2015-09-22T10:59:09.937

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application adobe air ≤ 18.0.0.143 Yes
Operating System google android * Yes
Application adobe air ≤ 18.0.0.199 Yes
Application adobe air_sdk ≤ 18.0.0.199 Yes
Application adobe air_sdk_\&_compiler ≤ 18.0.0.180 Yes
Operating System apple mac_os_x - No
Operating System microsoft windows - No
Application adobe flash_player ≤ 13.0.0.289 Yes
Application adobe flash_player 14.0.0.125 Yes
Application adobe flash_player 14.0.0.145 Yes
Application adobe flash_player 14.0.0.176 Yes
Application adobe flash_player 14.0.0.179 Yes
Application adobe flash_player 15.0.0.152 Yes
Application adobe flash_player 15.0.0.167 Yes
Application adobe flash_player 15.0.0.189 Yes
Application adobe flash_player 15.0.0.223 Yes
Application adobe flash_player 15.0.0.239 Yes
Application adobe flash_player 15.0.0.246 Yes
Application adobe flash_player 16.0.0.235 Yes
Application adobe flash_player 16.0.0.257 Yes
Application adobe flash_player 16.0.0.287 Yes
Application adobe flash_player 16.0.0.296 Yes
Application adobe flash_player 17.0.0.134 Yes
Application adobe flash_player 17.0.0.169 Yes
Application adobe flash_player 17.0.0.188 Yes
Application adobe flash_player 17.0.0.190 Yes
Application adobe flash_player 17.0.0.191 Yes
Application adobe flash_player 18.0.0.160 Yes
Application adobe flash_player 18.0.0.194 Yes
Application adobe flash_player 18.0.0.203 Yes
Application adobe flash_player 18.0.0.209 Yes
Application adobe flash_player 18.0.0.232 Yes
Operating System apple mac_os_x - No
Operating System microsoft windows - No
Application adobe flash_player ≤ 11.2.202.508 Yes
Operating System linux linux_kernel - No
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For adobe's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.