NetSight
IP …
critical9.8Known exploitedPublic exploit code

CVE-2015-0311

Adobe Flash Player Remote Code Execution Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-04-13. Federal due date: 2022-05-04.

The impacted product is end-of-life and should be disconnected if still in use.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.

Affected products

VendorProductAffected versions
AdobeFlash Player
through 11.2.202.438
through 13.0.0.262
from 14.0.0.125 before 16.0.0.287
SuseLinux Enterprise Desktop
Versions 11, 12
SuseLinux Enterprise Workstation Extension
Version 12
MicrosoftInternet Explorer
Versions 10, 11
MicrosoftEdge
All versions

References