CVEvulnerability
CVE-2015-5133
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-08-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5132.
Affected configurations
• adobe flash player (<= 11.2.202.491)
• adobe air (<= 18.0.0.180)
• adobe air sdk (<= 18.0.0.180)
• adobe air sdk \& compiler (<= 18.0.0.180)
• adobe flash player (<= 18.0.0.209)
• opensuse evergreen 11.4
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1603.html rhn.redhat.com
- http://www.securityfocus.com/bid/76284 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033235 www.securitytracker.com
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388 h20566.www2.hpe.com
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 h20566.www2.hpe.com
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 h20566.www2.hpe.com
- https://helpx.adobe.com/security/products/flash-player/apsb15-19.html Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201508-01 security.gentoo.org
- https://www.exploit-db.com/exploits/37858/ www.exploit-db.com
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1603.html rhn.redhat.com
- http://www.securityfocus.com/bid/76284 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033235 www.securitytracker.com
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388 h20566.www2.hpe.com
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 h20566.www2.hpe.com
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 h20566.www2.hpe.com
- https://helpx.adobe.com/security/products/flash-player/apsb15-19.html Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201508-01 security.gentoo.org
- https://www.exploit-db.com/exploits/37858/ www.exploit-db.com