UBUNTU-CVE-2015-7645

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2015-7645

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-7645.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2015-7645

Upstream

CVE-2015-7645

Published

2015-10-15T10:59:00Z

Modified

2025-07-16T07:17:36.976396Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Ubuntu - high

Summary

[none]

Details

Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.

References

Affected packages

Ubuntu:14.04:LTS / flashplugin-nonfree

Package

Name: flashplugin-nonfree
Purl: pkg:deb/ubuntu/flashplugin-nonfree@11.2.202.535ubuntu0.14.04.1?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

11.2.202.535ubuntu0.14.04.1

Affected versions

11.*

11.2.202.310ubuntu1

11.2.202.327ubuntu0.13.10.1

11.2.202.332ubuntu1

11.2.202.335ubuntu1

11.2.202.336ubuntu1

11.2.202.341ubuntu1

11.2.202.346ubuntu1

11.2.202.350ubuntu1

11.2.202.356ubuntu0.14.04.1

11.2.202.359ubuntu0.14.04.1

11.2.202.378ubuntu0.14.04.1

11.2.202.394ubuntu0.14.04.1

11.2.202.400ubuntu0.14.04.1

11.2.202.406ubuntu0.14.04.1

11.2.202.406ubuntu0.14.04.2

11.2.202.411ubuntu0.14.04.1

11.2.202.418ubuntu0.14.04.1

11.2.202.424ubuntu0.14.04.1

11.2.202.425ubuntu0.14.04.1

11.2.202.429ubuntu0.14.04.1

11.2.202.438ubuntu0.14.04.1

11.2.202.440ubuntu0.14.04.1

11.2.202.442ubuntu0.14.04.1

11.2.202.451ubuntu0.14.04.1

11.2.202.457ubuntu0.14.04.1

11.2.202.460ubuntu0.14.04.1

11.2.202.466ubuntu0.14.04.1

11.2.202.468ubuntu0.14.04.1

11.2.202.481ubuntu0.14.04.1

11.2.202.481ubuntu0.14.04.2

11.2.202.491ubuntu0.14.04.1

11.2.202.508ubuntu0.14.04.1

11.2.202.521ubuntu0.14.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "11.2.202.535ubuntu0.14.04.1",
            "binary_name": "flashplugin-downloader"
        },
        {
            "binary_version": "11.2.202.535ubuntu0.14.04.1",
            "binary_name": "flashplugin-installer"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-7645.json"