← Back

CVE-2015-3043

nvd nist
Published: Apr 14, 2015Modified: Apr 21, 2026CISA KEV

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.

Affected (19)

Show all products
Adobe: Flash Player · Novell: Suse Linux Enterprise Desktop, Suse Linux Enterprise Workstation Extension · Opensuse: Evergreen, Opensuse · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server From Rhui, Enterprise Linux Workstation
Adobe
1 product
Flash Player
Novell
2 products
Suse Linux Enterprise Desktop
Suse Linux Enterprise Workstation Extension
Opensuse
2 products
Evergreen
Opensuse
Redhat
6 products
Enterprise Linux Desktop
Enterprise Linux Eus
Enterprise Linux Server
Enterprise Linux Server Aus
Enterprise Linux Server From Rhui
Enterprise Linux Workstation
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Flash Player
Before 11.2.202.457
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Configuration B
2 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Adobe
Flash Player
Before 13.0.0.281
Flash Player
From 14.0.0.125 to 17.0.0.169
Running on/withPlatform Versions
Apple
Mac Os X
All versions
Microsoft
Windows
All versions
Configuration C
6 vulnerable
Vulnerable SoftwareAffected Versions
Novell
Suse Linux Enterprise Desktop
Version 11.0 sp3
Suse Linux Enterprise Desktop
Version 12.0
Suse Linux Enterprise Workstation Extension
Version 12.0
Evergreen
Version 11.4
Opensuse
Opensuse
Version 13.1
Opensuse
Version 13.2
Configuration D
10 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Enterprise Linux Desktop
Version 5.0
Enterprise Linux Desktop
Version 6.0
Enterprise Linux Eus
Version 6.6
Redhat
Enterprise Linux Server
Version 5.0
Enterprise Linux Server
Version 6.0
Enterprise Linux Server Aus
Version 6.6
Redhat
Enterprise Linux Server From Rhui
Version 5.0
Enterprise Linux Server From Rhui
Version 6.0
Redhat
Enterprise Linux Workstation
Version 5.0
Enterprise Linux Workstation
Version 6.0

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (22)

Source: psirt@adobe.com
Mailing ListThird Party Advisory
Source: psirt@adobe.com
Mailing ListThird Party Advisory
Source: psirt@adobe.com
Mailing ListThird Party Advisory
Source: psirt@adobe.com
Mailing ListThird Party Advisory
Source: psirt@adobe.com
Third Party Advisory
Source: psirt@adobe.com
Broken LinkThird Party AdvisoryVDB Entry
Source: psirt@adobe.com
Broken LinkThird Party AdvisoryVDB Entry
Source: psirt@adobe.com
Broken LinkPatchVendor Advisory
Source: psirt@adobe.com
Third Party Advisory
Source: psirt@adobe.com
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Issue Tracking
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.