CVEvulnerability
CVE-2015-3113
CISA Known Exploited Vulnerability
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability — Adobe Flash Player
Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.
- Added to KEV
- 2022-04-13
- Remediation due
- 2022-05-04
- Ransomware use
- Unknown
- Required action
- The impacted product is end-of-life and should be disconnected if still in use.
- Notes
- https://nvd.nist.gov/vuln/detail/CVE-2015-3113
- Status
- Analyzed
- Published
- 2015-06-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-122, CWE-787
Description
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.
Affected configurations
• adobe flash player (< 13.0.0.296)
• adobe flash player (>= 14.0.0.125 < 18.0.0.194)
• adobe flash player (< 11.2.202.468)
• opensuse evergreen 11.4
• opensuse opensuse 13.1
• opensuse opensuse 13.2
• suse linux enterprise desktop 12
• suse linux enterprise workstation extension 12
• hp insight orchestration (< 7.5.0)
• hp system management homepage (< 7.5.0)
• hp systems insight manager (< 7.5)
• hp version control agent (< 7.5.0)
• hp version control repository manager (< 7.5.0)
• hp version control repository manager 7.6
• hp virtual connect enterprise manager (< 7.5.0)
• redhat enterprise linux desktop 6.0
• redhat enterprise linux eus 6.6
• redhat enterprise linux server 6.0
• redhat enterprise linux workstation 6.0
Related
References
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00020.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00025.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00002.html Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=144050155601375&w=2 Mailing List
- http://rhn.redhat.com/errata/RHSA-2015-1184.html Third Party Advisory
- http://www.securityfocus.com/bid/75371 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032696 Broken Link, Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1235036 Issue Tracking
- https://bugzilla.suse.com/show_bug.cgi?id=935701 Issue Tracking
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952467 Broken Link
- https://helpx.adobe.com/security/products/flash-player/apsb15-14.html Broken Link, Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201507-13 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2015-3113.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00020.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00025.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00002.html Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=144050155601375&w=2 Mailing List
- http://rhn.redhat.com/errata/RHSA-2015-1184.html Third Party Advisory
- http://www.securityfocus.com/bid/75371 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032696 Broken Link, Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1235036 Issue Tracking
- https://bugzilla.suse.com/show_bug.cgi?id=935701 Issue Tracking
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952467 Broken Link
- https://helpx.adobe.com/security/products/flash-player/apsb15-14.html Broken Link, Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201507-13 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2015-3113.html Third Party Advisory
- https://github.com/cisagov/vulnrichment/issues/196 Issue Tracking
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3113 US Government Resource