NetSight
IP …
critical9.8Known exploitedPublic exploit code

CVE-2015-3043

Adobe Flash Player Memory Corruption Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-03. Federal due date: 2022-03-24.

The impacted product is end-of-life and should be disconnected if still in use.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.

Affected products

VendorProductAffected versions
AdobeFlash Player
before 11.2.202.457
before 13.0.0.281
from 14.0.0.125 before 17.0.0.169
NovellSuse Linux Enterprise Desktop
Versions 11.0, 12.0
NovellSuse Linux Enterprise Workstation Extension
Version 12.0
OpensuseEvergreen
Version 11.4
OpensuseOpensuse
Versions 13.1, 13.2
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Version 6.6
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Server Aus
Version 6.6
RedhatEnterprise Linux Server From Rhui
Versions 5.0, 6.0
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0

Weakness classification

CWE-787

References