Oval Definition:	oval:org.cisecurity:def:1247
Revision Date: 2016-11-11 Version: 22 Title: Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows - CVE-2015-8651 Description: Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK and Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2015-8651 Platform(s): Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Vista Microsoft Windows XP Product(s): ActiveX Control Adobe AIR Adobe Flash Player Pepper Flash Definition Synopsis Adobe Flash Player is installed + version (ESR) Adobe Flash Player is installed AND Check if Adobe Flash Player (ESR) version is less than 18.0.0.324 OR Adobe Flash Player is installed + version Adobe Flash Player is installed AND Check for Adobe Flash Player version Check if Adobe Flash Player version is less than 20.0.0.267 AND Check if Adobe Flash Player version is greater than or equal 19.0.0.0 OR Pepper Flash for Google Chrome version Google Chrome is installed AND Check if Pepper Flash for Google Chrome version is less than 20.0.0.267 OR ActiveX Control is installed + Flash*.ocx version ActiveX Control is installed AND Check for Flash*.ocx file version Check if Flash*.ocx (ESR) version is less than 18.0.0.324 OR Check for file version Check if Flash*.ocx version is less than 20.0.0.267 AND Check if Flash*.ocx version is greater than or equal 19.0.0.0 OR Adobe Air is installed + version Adobe AIR is installed AND Check if Adobe Air version is less than 20.0.0.233
BACK