CVE-2015-3111

Heap-based buffer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://helpx.adobe.com/security/products/photoshop/apsb15-12.html	Vendor Advisory
https://helpx.adobe.com/security/products/bridge/apsb15-13.html	Vendor Advisory
http://www.securityfocus.com/bid/75240
http://www.securitytracker.com/id/1032659
http://www.securitytracker.com/id/1032658

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:apple:mac_os_x::::::::
	cpe:2.3:o:microsoft:windows::::::::

Configuration 2 (hide)

AND

cpe:2.3:a:adobe:photoshop_cc:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:microsoft:windows::::::::
	cpe:2.3:o:apple:mac_os_x::::::::

Information

Published : 2015-06-24 03:59

Updated : 2016-12-27 18:59

NVD link : CVE-2015-3111

Mitre link : CVE-2015-3111

JSON object : View

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Products Affected

apple

mac_os_x

adobe

bridge
photoshop_cc

microsoft

windows

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://helpx.adobe.com/security/products/photoshop/apsb15-12.html", "name": "https://helpx.adobe.com/security/products/photoshop/apsb15-12.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://helpx.adobe.com/security/products/bridge/apsb15-13.html", "name": "https://helpx.adobe.com/security/products/bridge/apsb15-13.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/75240", "name": "75240", "tags": [], "refsource": "BID"}, {"url": "http://www.securitytracker.com/id/1032659", "name": "1032659", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.securitytracker.com/id/1032658", "name": "1032658", "tags": [], "refsource": "SECTRACK"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Heap-based buffer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-119"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2015-3111", "ASSIGNER": "psirt@adobe.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "acInsufInfo": true, "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2015-06-24T10:59Z", "configurations": {"nodes": [{"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "6.1"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:adobe:photoshop_cc:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "15.2.2"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2016-12-28T02:59Z"}

10.0 /10