Vulnerability CVE-2015-3118: Information

Description

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.

Severity: CRITICAL (10.0)

URL: https://nvd.nist.gov/vuln/detail/CVE-2015-3118
Published: July 9, 2015
Modified: Sept. 22, 2017

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://helpx.adobe.com/security/products/flash-player/apsb15-16.html
  • Patch
  • Vendor Advisory
75590
    GLSA-201507-13
      RHSA-2015:1214
        SUSE-SU-2015:1214
          SUSE-SU-2015:1211
            37848
              1032810

                  1. Configuration 1

                    cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:14.0.0.145:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:14.0.0.176:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:14.0.0.179:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:15.0.0.152:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:15.0.0.167:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:15.0.0.189:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:15.0.0.223:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:15.0.0.239:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:15.0.0.246:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:16.0.0.235:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:16.0.0.257:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:16.0.0.287:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:16.0.0.296:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:17.0.0.134:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:17.0.0.169:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:17.0.0.188:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:17.0.0.190:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:18.0.0.160:*:*:*:*:*:*:*
                    cpe:2.3:a:adobe:flash_player:18.0.0.194:*:*:*:*:*:*:*
                    Running on/with:
                    cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
                    Running on/with:
                    cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

                    Configuration 2

                    cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
                    Running on/with:
                    cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

                    Configuration 3

                    cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*
                    End including
                    18.0.0.144
                    cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:*
                    End including
                    18.0.0.144
                    cpe:2.3:a:adobe:air_sdk_\&_compiler:*:*:*:*:*:*:*:*
                    End including
                    18.0.0.144
                VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
                Version: v24.4.2
                Back to top