CVE-2015-0313
Critical · 9.8 CISA KEVCVSS
9.8
EPSS
95.3%
Published
Feb 2, 2015
CISA due date
May 4, 2022
The record
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:4 | flash-player-plugin | 0 | 11.2.202.442-1.mga4.nonfree |
| SUSE:Linux Enterprise Desktop 12 | flash-player | 0 | 11.2.202.442-67.1 |
| SUSE:Linux Enterprise Workstation Extension 12 | flash-player | 0 | 11.2.202.442-67.1 |
| Ubuntu:14.04:LTS | flashplugin-nonfree | 0 | 11.2.202.442ubuntu0.14.04.1 |
Related vulnerabilities
- CVE-2015-5563 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5562 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on… Also affects flash-player-plugin
- CVE-2015-5561 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5560 Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before… Also affects flash-player-plugin
- CVE-2015-5558 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on… Also affects flash-player-plugin
- CVE-2015-5557 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5556 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5555 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on… Also affects flash-player-plugin