Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2015-3042

17 documents7 sources

Severity

10.0CRITICAL

EPSS

51.9%

top 2.09%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Adobe Flash Player Opensuse Opensuse Redhat Enterprise Linux Desktop Supplementary +5 more

Timeline

PublishedApr 14

Latest updateMay 14

Description

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3043.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages7 packages

▶NVDadobe/flash_player11.2.202.451+16

▶Ubuntuflashplugin-nonfree< 11.2.202.457ubuntu0.14.04.1

▶NVDsuse/suse_linux_enterprise_desktop11.0, 12.0+1

▶NVDsuse/suse_linux_workstation_extension12.0

▶NVDredhat/enterprise_linux_desktop_supplementary5.0, 6.0+1

Also affects: Enterprise Linux 5.0, 6.0, 6.6.z

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

GHSA

GHSA-xj5f-4p5c-vxq5: Adobe Flash Player before 13↗2022-05-14

▶

CVEList

CVE-2015-3042: Adobe Flash Player before 13↗2015-04-14

▶

OSV

CVE-2015-3042: Adobe Flash Player before 13↗2015-04-14

▶

💥Exploits & PoCs

Exploit-DB

Flash - PCRE Regex Compilation Zero-Length Assertion Arbitrary Bytecode Execution↗2015-08-19

▶