critical10.0Public exploit code

CVE-2015-3134

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180,…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Adobe Flash - Out-of-Bounds Read in UTF Conversion2015-08-19 · dos · windows · Verified

Impact

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, and CVE-2015-4431.

Affected products

Vendor	Product	Affected versions
Adobe	Flash Player	through 11.2.202.468 through 13.0.0.289 Versions 14.0.0.125, 14.0.0.145, 14.0.0.176, 14.0.0.179
Adobe	Air	through 18.0.0.144
Adobe	Air Sdk	through 18.0.0.144
Adobe	Air Sdk \& Compiler	through 18.0.0.144

Weakness classification

CWE-119

Public exploit code

Impact

Affected products

Weakness classification

References