CVE-2015-0311
Critical · 9.8 CISA KEVCVSS
9.8
EPSS
85.6%
Published
Jan 23, 2015
CISA due date
May 4, 2022
The record
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:4 | flash-player-plugin | 0 | 11.2.202.440-1.1.mga4.nonfree |
| Red Hat:rhel_extras:5::client | flash-plugin | 0 | 0:11.2.202.440-1.el5 |
| Red Hat:rhel_extras:5::server | flash-plugin | 0 | 0:11.2.202.440-1.el5 |
| Red Hat:rhel_extras:6 | flash-plugin | 0 | 0:11.2.202.440-1.el6 |
| Ubuntu:14.04:LTS | flashplugin-nonfree | 0 | 11.2.202.429ubuntu0.14.04.1 |
Related vulnerabilities
- CVE-2015-5563 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5562 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on… Also affects flash-player-plugin
- CVE-2015-5561 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5560 Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before… Also affects flash-player-plugin
- CVE-2015-5558 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on… Also affects flash-player-plugin
- CVE-2015-5557 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5556 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5555 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on… Also affects flash-player-plugin