CVEvulnerability
CVE-2015-3087
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-05-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.
Affected configurations
• adobe air (<= 17.0.0.144)
• adobe air sdk (<= 17.0.0.144)
• adobe air sdk \& compiler (<= 17.0.0.144)
• adobe flash player (<= 11.2.202.475)
• adobe flash player (<= 13.0.0.264)
• adobe flash player 14.0.0.125
• adobe flash player 14.0.0.145
• adobe flash player 14.0.0.176
• adobe flash player 14.0.0.179
• adobe flash player 15.0.0.152
• adobe flash player 15.0.0.167
• adobe flash player 15.0.0.189
• adobe flash player 15.0.0.223
• adobe flash player 15.0.0.239
• adobe flash player 15.0.0.246
• adobe flash player 16.0.0.235
• adobe flash player 16.0.0.257
• adobe flash player 16.0.0.287
• adobe flash player 16.0.0.296
• adobe flash player 17.0.0.134
• adobe flash player 17.0.0.169
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00007.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00010.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00016.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-1005.html rhn.redhat.com
- http://www.securityfocus.com/bid/74616 www.securityfocus.com
- http://www.securitytracker.com/id/1032285 www.securitytracker.com
- https://helpx.adobe.com/security/products/flash-player/apsb15-09.html Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201505-02 security.gentoo.org
- https://www.exploit-db.com/exploits/37843/ www.exploit-db.com
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00007.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00010.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00016.html lists.opensuse.org
- http://rhn.redhat.com/errata/RHSA-2015-1005.html rhn.redhat.com
- http://www.securityfocus.com/bid/74616 www.securityfocus.com
- http://www.securitytracker.com/id/1032285 www.securitytracker.com
- https://helpx.adobe.com/security/products/flash-player/apsb15-09.html Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201505-02 security.gentoo.org
- https://www.exploit-db.com/exploits/37843/ www.exploit-db.com