Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveAdobeCVE-2015-0313
HistoryFeb 02, 2015 - 7:59 p.m.

CVE-2015-0313

2015-02-0219:59:00
CWE-416
adobe
web.nvd.nist.gov
841
In Wild
20
cve-2015-0313
adobe flash player
vulnerability
use-after-free
remote code execution
windows
os x
linux
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.973

Percentile

99.9%

JSON

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.

Affected configurations

Nvd
Node
adobeflash_playerRange<11.2.202.442
AND
linuxlinux_kernelMatch-
Node
adobeflash_playerRange<13.0.0.269
OR
adobeflash_playerRange14.0.0.125–16.0.0.305
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
opensuseevergreenMatch11.4
OR
opensuseopensuseMatch13.1
OR
opensuseopensuseMatch13.2
OR
suselinux_enterprise_desktopMatch11sp3
OR
suselinux_enterprise_desktopMatch12-
OR
suselinux_enterprise_workstation_extensionMatch12-
Node
microsoftinternet_explorerMatch10
AND
microsoftwindows_8Match-
OR
microsoftwindows_rtMatch-
OR
microsoftwindows_server_2012Match-
Node
microsoftinternet_explorerMatch11-
AND
microsoftwindows_10_1507Match-
OR
microsoftwindows_8.1Match-
OR
microsoftwindows_rt_8.1Match-
OR
microsoftwindows_server_2012Matchr2
Node
microsoftedgeMatch-
AND
microsoftwindows_10_1507Match-
VendorProductVersionCPE
adobeflash_player*cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
applemac_os_x-cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
opensuseevergreen11.4cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*
opensuseopensuse13.1cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
opensuseopensuse13.2cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
suselinux_enterprise_desktop11cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
suselinux_enterprise_desktop12cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
suselinux_enterprise_workstation_extension12cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*
Rows per page:
1-10 of 201

Social References

More

Related

ubuntucve 5
prion 5
cvelist 5
nvd 5
cve 4
attackerkb 3
canvas 1
checkpoint_advisories 5
nessus 13
exploitdb 2
threatpost 5
zdt 1
cisa_kev 1
symantec 1
packetstorm 1
exploitpack 1
metasploit 1
thn 2
hackerone 2
suse 4
mageia 1
openvas 7
archlinux 1
altlinux 1
redhat 1
gentoo 1
githubexploit 2
ubuntucve
ubuntucve
CVE-2015-0320
2015-02-06 00:00:00
CVE-2015-0315
2015-02-06 00:00:00
CVE-2015-0322
2015-02-06 00:00:00
prion
prion
Design/Logic Flaw
2015-02-06 00:59:00
Design/Logic Flaw
2015-02-06 00:59:00
Design/Logic Flaw
2015-02-02 19:59:00
cvelist
cvelist
CVE-2015-0320
2015-02-06 00:00:00
CVE-2015-0315
2015-02-06 00:00:00
CVE-2015-0313
2015-02-02 19:00:00
nvd
nvd
CVE-2015-0320
2015-02-06 00:59:05
CVE-2015-0322
2015-02-06 00:59:07
CVE-2015-0313
2015-02-02 19:59:00
cve
cve
CVE-2015-0320
2015-02-06 00:59:05
CVE-2015-0322
2015-02-06 00:59:07
CVE-2015-0315
2015-02-06 00:59:01
attackerkb
attackerkb
CVE-2015-0313
2015-02-02 00:00:00
CVE-2015-0322
2015-02-06 00:00:00
CVE-2015-0320
2015-02-06 00:00:00
canvas
canvas
Immunity Canvas: ADOBE_FLASH_DOMAINMEMORY_UAF
2015-02-02 19:59:00
checkpoint_advisories
checkpoint_advisories
HanJuan Exploit Kit Landing Page (CVE-2015-0313)
2015-02-03 00:00:00
Adobe Flash Player Remote Code Execution (APSA15-02: CVE-2015-0313)
2015-02-04 00:00:00
Adobe Flash Use After Free Code Execution (APSB15-04: CVE-2015-0320)
2015-02-23 00:00:00
nessus
nessus
FreeBSD : Adobe Flash Player -- critical vulnerability (734bcd49-aae6-11e4-a0c1-c485083ca99c) (deprecated)
2015-02-03 00:00:00
openSUSE Security Update : flash-player (openSUSE-2015-118)
2015-02-09 00:00:00
SuSE 11.3 Security Update : flash-player, flash-player-gnome, flash-player-kde4 (SAT Patch Number 10287)
2015-02-09 00:00:00
exploitdb
exploitdb
Adobe Flash Player - ByteArray With Workers Use-After-Free (Metasploit)
2015-03-31 00:00:00
Adobe Flash Player - Arbitrary Code Execution
2015-03-25 00:00:00
threatpost
threatpost
Adobe Begins Patching Third Flash Player Zero Day
2015-02-04 16:44:42
Another Flash Zero Day Emerges
2015-02-02 08:51:33
Angler Exploit Kit, Bedep Malware Inflating Video Views
2015-05-05 08:00:41
zdt
zdt
Adobe Flash Player ByteArray With Workers Use After Free Exploit
2015-04-02 00:00:00
cisa_kev
cisa_kev
Adobe Flash Player Use-After-Free Vulnerability
2022-04-13 00:00:00
symantec
symantec
Adobe Flash Player CVE-2015-0313 Remote Code Execution Vulnerability
2015-02-02 00:00:00
packetstorm
packetstorm
Adobe Flash Player ByteArray With Workers Use After Free
2015-03-30 00:00:00
exploitpack
exploitpack
Adobe Flash Player - Arbitrary Code Execution
2015-03-25 00:00:00
metasploit
metasploit
Adobe Flash Player ByteArray With Workers Use After Free
2015-03-27 23:51:13
thn
thn
Another Unpatched Adobe Flash Zero-Day vulnerability Exploited in the Wild
2015-02-02 06:29:00
Researchers Share New Insights Into RIG Exploit Kit Malware's Operations
2023-02-27 15:33:00
hackerone
hackerone
Internet Bug Bounty: Use after free during the StageVideoAvailabilityEvent can result in arbitrary code execution
2015-02-09 18:44:09
Internet Bug Bounty: Use After Free in Flash MessageChannel.send can cause arbitrary code execution
2015-02-09 18:50:52
suse
suse
Security update for flash-player, flash-player-gnome, flash-player-kde4 (critical)
2015-02-07 19:07:55
update for flash-player (critical)
2015-02-07 14:04:53
Security update for flash-player (critical)
2015-02-07 10:04:51
mageia
mageia
Updated flash-player-plugin packages fix security vulnerabilities
2015-02-06 19:51:41
openvas
openvas
SUSE: Security Advisory for flash-player (SUSE-SU-2015:0236-1)
2015-10-16 00:00:00
SUSE: Security Advisory for flash-player (SUSE-SU-2015:0239-1)
2015-10-16 00:00:00
Mageia: Security Advisory (MGASA-2015-0054)
2022-01-28 00:00:00
archlinux
archlinux
flashplugin: remote code execution
2015-02-06 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt41
2015-02-06 00:00:00
redhat
redhat
(RHSA-2015:0140) Critical: flash-plugin security update
2015-02-06 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2015-02-06 00:00:00
githubexploit
githubexploit
Exploit for CVE-2014-4210
2022-03-19 01:54:15
Exploit for CVE-2014-4210
2022-03-19 01:54:15

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.973

Percentile

99.9%

JSON
Related for CVE-2015-0313
ubuntucve5prion5cvelist5nvd5cve4attackerkb3canvas1checkpoint_advisories5nessus13exploitdb2threatpost5zdt1cisa_kev1symantec1packetstorm1exploitpack1metasploit1thn2hackerone2suse4mageia1openvas7archlinux1altlinux1redhat1gentoo1githubexploit2