CVE-2015-3081
NoneCVSS
—
EPSS
11.4%
Published
May 13, 2015
CISA due date
—
The record
Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to bypass the Internet Explorer Protected Mode protection mechanism via unspecified vectors.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:4 | flash-player-plugin | 0 | 11.2.202.460-1.mga4.nonfree |
| SUSE:Linux Enterprise Desktop 12 | flash-player | 0 | 11.2.202.460-83.1 |
| SUSE:Linux Enterprise Workstation Extension 12 | flash-player | 0 | 11.2.202.460-83.1 |
| Ubuntu:14.04:LTS | flashplugin-nonfree | 0 | 11.2.202.460ubuntu0.14.04.1 |
Related vulnerabilities
- CVE-2015-5563 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5562 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on… Also affects flash-player-plugin
- CVE-2015-5561 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5560 Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before… Also affects flash-player-plugin
- CVE-2015-5558 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on… Also affects flash-player-plugin
- CVE-2015-5557 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5556 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5555 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on… Also affects flash-player-plugin