Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-3128
HistoryJul 09, 2015 - 4:59 p.m.

CVE-2015-3128

2015-07-0916:59:15
[email protected]
web.nvd.nist.gov
43
cve-2015-3128
adobe flash player
use-after-free
arbitrary code execution
security vulnerability
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.906 High

EPSS

Percentile

98.9%

JSON

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.

Affected configurations

NVD
Node
adobeairRange≤18.0.0.144
OR
adobeair_sdkRange≤18.0.0.144
OR
adobeair_sdk_\&_compilerRange≤18.0.0.144
Node
adobeflash_playerRange≤13.0.0.289
OR
adobeflash_playerMatch14.0.0.125
OR
adobeflash_playerMatch14.0.0.145
OR
adobeflash_playerMatch14.0.0.176
OR
adobeflash_playerMatch14.0.0.179
OR
adobeflash_playerMatch15.0.0.152
OR
adobeflash_playerMatch15.0.0.167
OR
adobeflash_playerMatch15.0.0.189
OR
adobeflash_playerMatch15.0.0.223
OR
adobeflash_playerMatch15.0.0.239
OR
adobeflash_playerMatch15.0.0.246
OR
adobeflash_playerMatch16.0.0.235
OR
adobeflash_playerMatch16.0.0.257
OR
adobeflash_playerMatch16.0.0.287
OR
adobeflash_playerMatch16.0.0.296
OR
adobeflash_playerMatch17.0.0.134
OR
adobeflash_playerMatch17.0.0.169
OR
adobeflash_playerMatch17.0.0.188
OR
adobeflash_playerMatch17.0.0.190
OR
adobeflash_playerMatch18.0.0.160
OR
adobeflash_playerMatch18.0.0.194
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
adobeflash_playerRange≤11.2.202.468
AND
linuxlinux_kernelMatch-

Related

ubuntucve 12
cvelist 12
nvd 12
prion 12
cve 11
checkpoint_advisories 7
redhat 1
nessus 15
suse 2
altlinux 2
openvas 8
mageia 1
gentoo 1
kaspersky 1
securityvulns 1
ubuntucve
ubuntucve
CVE-2015-3136
2015-07-09 00:00:00
CVE-2015-3131
2015-07-09 00:00:00
CVE-2015-3132
2015-07-09 00:00:00
cvelist
cvelist
CVE-2015-3128
2015-07-09 16:00:00
CVE-2015-3129
2015-07-09 16:00:00
CVE-2015-3132
2015-07-09 16:00:00
nvd
nvd
CVE-2015-3137
2015-07-09 16:59:23
CVE-2015-3136
2015-07-09 16:59:22
CVE-2015-3124
2015-07-09 16:59:11
prion
prion
Design/Logic Flaw
2015-07-09 16:59:00
Design/Logic Flaw
2015-07-09 16:59:00
Design/Logic Flaw
2015-07-09 16:59:00
cve
cve
CVE-2015-3136
2015-07-09 16:59:22
CVE-2015-3129
2015-07-09 16:59:16
CVE-2015-3131
2015-07-09 16:59:17
checkpoint_advisories
checkpoint_advisories
Adobe Flash Use After Free Code Execution (APSB15-16: CVE-2015-3128; CVE-2015-3136; CVE-2015-3137; CVE-2015-4428)
2015-07-26 00:00:00
Adobe Flash Player Use After Free Remote Code Execution (APSB15-16: CVE-2015-3127; CVE-2015-3131)
2015-07-26 00:00:00
Adobe Flash Use After Free Code Execution (APSB15-16: CVE-2015-3118)
2015-07-20 00:00:00
redhat
redhat
(RHSA-2015:1214) Critical: flash-plugin security update
2015-07-08 00:00:00
nessus
nessus
Adobe Flash Player <= 18.0.0.194 Multiple Vulnerabilities (APSB15-16) (Mac OS X)
2015-07-09 00:00:00
Adobe Flash Player <= 18.0.0.194 Multiple Vulnerabilities (APSB15-16)
2015-07-09 00:00:00
Adobe AIR < 18.0.0.180 Multiple Vulnerabilities (APSB15-16)
2015-09-11 00:00:00
suse
suse
Security update for flash-player (critical)
2015-07-09 11:08:12
Security update for flash-player (critical)
2015-07-09 14:08:22
altlinux
altlinux
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt47
2015-07-08 00:00:00
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt47
2015-07-08 00:00:00
openvas
openvas
Adobe Flash Player Use-After-Free Vulnerability (Jul 2015) - Linux
2015-07-08 00:00:00
Mageia: Security Advisory (MGASA-2015-0273)
2015-10-15 00:00:00
Adobe Flash Player Use-After-Free Vulnerability (Jul 2015) - Windows
2015-07-08 00:00:00
mageia
mageia
Updated flash-player-plugin package fixes critical security vulnerabilities
2015-07-09 11:09:20
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2015-07-10 00:00:00
kaspersky
kaspersky
KLA10623 Multiple vulnerabilities in Adobe products
2015-07-08 00:00:00
securityvulns
securityvulns
Adobe Flash Player multiple security vulnerabilities
2015-07-19 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.906 High

EPSS

Percentile

98.9%

JSON
Related for CVE-2015-3128
ubuntucve12cvelist12nvd12prion12cve11checkpoint_advisories7redhat1nessus15suse2altlinux2openvas8mageia1gentoo1kaspersky1securityvulns1