Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-3043
HistoryApr 14, 2015 - 10:59 p.m.

CVE-2015-3043

2015-04-1422:59:21
CWE-787
[email protected]
web.nvd.nist.gov
8

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

Low

EPSS

0.934

Percentile

99.1%

JSON

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.

Affected configurations

Nvd
Node
adobeflash_playerRange<11.2.202.457
AND
linuxlinux_kernelMatch-
Node
adobeflash_playerRange<13.0.0.281
OR
adobeflash_playerRange14.0.0.125–17.0.0.169
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
novellsuse_linux_enterprise_desktopMatch11.0sp3
OR
novellsuse_linux_enterprise_desktopMatch12.0
OR
novellsuse_linux_enterprise_workstation_extensionMatch12.0
OR
opensuseevergreenMatch11.4
OR
opensuseopensuseMatch13.1
OR
opensuseopensuseMatch13.2
Node
redhatenterprise_linux_desktopMatch5.0
OR
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_eusMatch6.6
OR
redhatenterprise_linux_serverMatch5.0
OR
redhatenterprise_linux_serverMatch6.0
OR
redhatenterprise_linux_server_ausMatch6.6
OR
redhatenterprise_linux_server_from_rhuiMatch5.0
OR
redhatenterprise_linux_server_from_rhuiMatch6.0
OR
redhatenterprise_linux_workstationMatch5.0
OR
redhatenterprise_linux_workstationMatch6.0
VendorProductVersionCPE
adobeflash_player*cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
applemac_os_x-cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
novellsuse_linux_enterprise_desktop11.0cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*
novellsuse_linux_enterprise_desktop12.0cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*
novellsuse_linux_enterprise_workstation_extension12.0cpe:2.3:o:novell:suse_linux_enterprise_workstation_extension:12.0:*:*:*:*:*:*:*
opensuseevergreen11.4cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*
opensuseopensuse13.1cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
opensuseopensuse13.2cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
Rows per page:
1-10 of 201

Related

ubuntucve 11
prion 11
cve 11
nvd 10
cvelist 11
attackerkb 3
openvas 7
nessus 13
kaspersky 1
freebsd 1
altlinux 2
redhat 1
gentoo 1
suse 4
archlinux 1
mageia 1
checkpoint_advisories 11
zdi 1
zdt 2
cisa_kev 1
exploitpack 1
exploitdb 3
metasploit 1
packetstorm 1
threatpost 1
ubuntucve
ubuntucve
CVE-2015-3038
2015-04-14 00:00:00
CVE-2015-0353
2015-04-14 00:00:00
CVE-2015-0347
2015-04-14 00:00:00
prion
prion
Memory corruption
2015-04-14 22:59:00
Memory corruption
2015-04-14 22:59:00
Memory corruption
2015-04-14 22:59:00
cve
cve
CVE-2015-0352
2015-04-14 22:59:06
CVE-2015-0354
2015-04-14 22:59:08
CVE-2015-0360
2015-04-14 22:59:13
nvd
nvd
CVE-2015-0350
2015-04-14 22:59:04
CVE-2015-3041
2015-04-14 22:59:19
CVE-2015-0355
2015-04-14 22:59:08
cvelist
cvelist
CVE-2015-3043
2015-04-14 22:00:00
CVE-2015-3042
2015-04-14 22:00:00
CVE-2015-3041
2015-04-14 22:00:00
attackerkb
attackerkb
CVE-2015-3043
2015-04-14 00:00:00
CVE-2015-3038
2015-04-14 00:00:00
CVE-2015-0355
2015-04-14 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0155)
2022-01-28 00:00:00
Gentoo Security Advisory GLSA 201504-07
2015-09-29 00:00:00
SUSE: Security Advisory for Adobe (SUSE-SU-2015:0722-1)
2015-10-16 00:00:00
nessus
nessus
Adobe AIR < 17.0.0.172 Multiple Vulnerabilities (APSB15-06)
2015-07-24 00:00:00
Flash Player < 13.0.0.281 / 17.0.0.169 Multiple Vulnerabilities (APSB15-06)
2015-07-24 00:00:00
SuSE 11.3 Security Update : flash-player (SAT Patch Number 10615)
2015-04-16 00:00:00
kaspersky
kaspersky
KLA10547 Multiple vulnerabilities in Adobe Flash Player
2015-04-14 00:00:00
freebsd
freebsd
Adobe Flash Player -- critical vulnerabilities
2015-04-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt43
2015-04-15 00:00:00
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt43
2015-04-15 00:00:00
redhat
redhat
(RHSA-2015:0813) Critical: flash-plugin security update
2015-04-15 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2015-04-17 00:00:00
suse
suse
Security update for Adobe Flash Player (important)
2015-04-15 13:05:12
Security update for Adobe Flash Player (important)
2015-04-15 10:04:46
Security update for flash-player (important)
2015-04-16 00:04:48
archlinux
archlinux
flashplugin: multiple issues
2015-04-17 00:00:00
mageia
mageia
Updated flash-player-plugin packages fix security vulnerabilities
2015-04-15 12:01:28
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Memory Corruption (APSB15-06: CVE-2015-0350)
2015-04-15 00:00:00
Adobe Flash Player Memory Corruption (APSB15-06: CVE-2015-0347)
2015-04-15 00:00:00
Adobe Flash Player Memory Corruption (APSB15-06: CVE-2015-0354)
2015-04-16 00:00:00
zdi
zdi
Adobe Flash Player AVSource Memory Corruption Remote Code Execution Vulnerability
2015-04-15 00:00:00
zdt
zdt
Flash PCRE Regex Compilation Zero-Length Assertion Arbitrary Bytecode Execution Exploit
2015-08-19 00:00:00
Adobe Flash Player Nellymoser Audio Decoding Buffer Overflow Exploit
2015-07-09 00:00:00
cisa_kev
cisa_kev
Adobe Flash Player Memory Corruption Vulnerability
2022-03-03 00:00:00
exploitpack
exploitpack
Adobe Flash - Heap Buffer Overflow Loading .FLV File with Nellymoser Audio Codec
2015-08-19 00:00:00
exploitdb
exploitdb
Flash - PCRE Regex Compilation Zero-Length Assertion Arbitrary Bytecode Execution
2015-08-19 00:00:00
Adobe Flash Player - Nellymoser Audio Decoding Buffer Overflow (Metasploit)
2015-07-08 00:00:00
Adobe Flash - Heap Buffer Overflow Loading &#039;.FLV&#039; File with Nellymoser Audio Codec
2015-08-19 00:00:00
metasploit
metasploit
Adobe Flash Player Nellymoser Audio Decoding Buffer Overflow
2015-07-01 18:13:57
packetstorm
packetstorm
Adobe Flash Player Nellymoser Audio Decoding Buffer Overflow
2015-07-03 00:00:00
threatpost
threatpost
April 2015 Microsoft Patch Tuesday Security Bulletins
2015-04-14 14:49:25

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

Low

EPSS

0.934

Percentile

99.1%

JSON
Related for NVD:CVE-2015-3043
ubuntucve11prion11cve11nvd10cvelist11attackerkb3openvas7nessus13kaspersky1freebsd1altlinux2redhat1gentoo1suse4archlinux1mageia1checkpoint_advisories11zdi1zdt2cisa_kev1exploitpack1exploitdb3metasploit1packetstorm1threatpost1