CVE-2015-7645
Publication date 15 October 2015
Last updated 25 August 2025
Ubuntu priority
Description
Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| adobe-flashplugin | ||
| 14.04 LTS trusty |
Fixed 1:20151013.1-0trusty1
|
|
| flashplugin-nonfree | ||
| 14.04 LTS trusty |
Fixed 11.2.202.535ubuntu0.14.04.1
|
|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
7.8 · High
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H