CVE-2015-3110

Integer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://helpx.adobe.com/security/products/photoshop/apsb15-12.html	Vendor Advisory
https://helpx.adobe.com/security/products/bridge/apsb15-13.html	Vendor Advisory
http://www.securityfocus.com/bid/75243
http://www.securitytracker.com/id/1032659
http://www.securitytracker.com/id/1032658

Advertisement

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:adobe:photoshop_cc:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:microsoft:windows::::::::
	cpe:2.3:o:apple:mac_os_x::::::::

Configuration 2 (hide)

AND

cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:microsoft:windows::::::::
	cpe:2.3:o:apple:mac_os_x::::::::

Information

Published : 2015-06-24 03:59

Updated : 2016-12-27 18:59

NVD link : CVE-2015-3110

Mitre link : CVE-2015-3110

JSON object : View

CWE

CWE-189

Numeric Errors

Advertisement

Products Affected

apple

mac_os_x

adobe

bridge
photoshop_cc

microsoft

windows

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://helpx.adobe.com/security/products/photoshop/apsb15-12.html", "name": "https://helpx.adobe.com/security/products/photoshop/apsb15-12.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://helpx.adobe.com/security/products/bridge/apsb15-13.html", "name": "https://helpx.adobe.com/security/products/bridge/apsb15-13.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/75243", "name": "75243", "tags": [], "refsource": "BID"}, {"url": "http://www.securitytracker.com/id/1032659", "name": "1032659", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.securitytracker.com/id/1032658", "name": "1032658", "tags": [], "refsource": "SECTRACK"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Integer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-189"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2015-3110", "ASSIGNER": "psirt@adobe.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "acInsufInfo": true, "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2015-06-24T10:59Z", "configurations": {"nodes": [{"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:adobe:photoshop_cc:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "15.2.2"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "6.1"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2016-12-28T02:59Z"}