NetSight
IP …
critical9.8Known exploitedPublic exploit code

CVE-2015-3113

Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-04-13. Federal due date: 2022-05-04.

The impacted product is end-of-life and should be disconnected if still in use.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.

Affected products

VendorProductAffected versions
AdobeFlash Player
before 13.0.0.296
from 14.0.0.125 before 18.0.0.194
before 11.2.202.468
OpensuseEvergreen
Version 11.4
OpensuseOpensuse
Versions 13.1, 13.2
SuseLinux Enterprise Desktop
Version 12
SuseLinux Enterprise Workstation Extension
Version 12
HpInsight Orchestration
before 7.5.0
HpSystem Management Homepage
before 7.5.0
HpSystems Insight Manager
before 7.5
HpVersion Control Agent
before 7.5.0
HpVersion Control Repository Manager
before 7.5.0
Version 7.6
HpVirtual Connect Enterprise Manager
before 7.5.0
RedhatEnterprise Linux Desktop
Version 6.0

Weakness classification

CWE-787CWE-122

References