critical10.0Public exploit code
CVE-2015-3042
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Flash - PCRE Regex Compilation Zero-Length Assertion Arbitrary Bytecode Execution2015-08-19 · dos · linux · Verified
Impact
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Flash Player | through 11.2.202.451 through 13.0.0.264 Versions 14.0.0.125, 14.0.0.145, 14.0.0.176, 14.0.0.179 |
| Opensuse | Opensuse | Versions 13.1, 13.2 |
| Suse | Suse Linux Enterprise Desktop | Versions 11.0, 12.0 |
| Suse | Suse Linux Workstation Extension | Version 12.0 |
| Redhat | Enterprise Linux Desktop Supplementary | Versions 5.0, 6.0 |
| Redhat | Enterprise Linux Server Supplementary | Versions 5.0, 6.0 |
| Redhat | Enterprise Linux Server Supplementary Eus | Version 6.6.z |
| Redhat | Enterprise Linux Workstation Supplementary | Version 6.0 |
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html
- http://rhn.redhat.com/errata/RHSA-2015-0813.html
- http://www.securityfocus.com/bid/74062
- http://www.securitytracker.com/id/1032105
- https://helpx.adobe.com/security/products/flash-player/apsb15-06.html
- https://security.gentoo.org/glsa/201504-07
- https://www.exploit-db.com/exploits/37839/
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html
- http://rhn.redhat.com/errata/RHSA-2015-0813.html
- http://www.securityfocus.com/bid/74062
- http://www.securitytracker.com/id/1032105
- https://helpx.adobe.com/security/products/flash-player/apsb15-06.html
- https://security.gentoo.org/glsa/201504-07
- https://www.exploit-db.com/exploits/37839/