CVE-2015-3113
Critical · 9.8 CISA KEVCVSS
9.8
EPSS
99.8%
Published
Jun 23, 2015
CISA due date
May 4, 2022
The record
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:4 | flash-player-plugin | 0 | 11.2.202.468-1.mga4.nonfree |
| Mageia:5 | flash-player-plugin | 0 | 11.2.202.468-1.mga5.nonfree |
| Red Hat:rhel_extras:5::client | flash-plugin | 0 | 0:11.2.202.468-1.el5 |
| Red Hat:rhel_extras:5::server | flash-plugin | 0 | 0:11.2.202.468-1.el5 |
| Red Hat:rhel_extras:6 | flash-plugin | 0 | 0:11.2.202.468-1.el6_6 |
| SUSE:Linux Enterprise Desktop 12 | flash-player | 0 | 11.2.202.468-89.1 |
| SUSE:Linux Enterprise Workstation Extension 12 | flash-player | 0 | 11.2.202.468-89.1 |
| Ubuntu:14.04:LTS | flashplugin-nonfree | 0 | 11.2.202.468ubuntu0.14.04.1 |
Related vulnerabilities
- CVE-2015-5563 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5562 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on… Also affects flash-player-plugin
- CVE-2015-5561 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5560 Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before… Also affects flash-player-plugin
- CVE-2015-5558 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on… Also affects flash-player-plugin
- CVE-2015-5557 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5556 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X… Also affects flash-player-plugin
- CVE-2015-5555 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on… Also affects flash-player-plugin