CVE-2015-3105 — Vulnetix

Try Vulnetix Request Demo

CVE-2015-3105 PUBLISHED

Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

EPSS 90.26% · 99.6th percentile

Risk Scores

EPSS Score

90.26%

99.6th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:14.04:LTS	flashplugin-nonfree	0, 11.2.202.310ubuntu1, 11.2.202.327ubuntu0.13.10.1

Timeline

Jan 1, 2012 VulnCheck KEV Exploitation
Nov 16, 2012 VulnCheck KEV Exploitation
Mar 21, 2013 VulnCheck KEV Exploitation
Oct 22, 2014 VulnCheck KEV Exploitation
Jun 10, 2015 CVE Published
Jul 1, 2015 PoC Published
Oct 15, 2015 PoC Published
Mar 14, 2018 PoC Published
May 29, 2018 PoC Published
Oct 9, 2020 PoC Published
Oct 9, 2020 PoC Published
Feb 4, 2022 EPSS Score

References

https://ubuntu.com/security/CVE-2015-3105 third-party-advisory
https://helpx.adobe.com/security/products/flash-player/apsb15-11.html third-party-advisory
https://www.cve.org/CVERecord?id=CVE-2015-3105 third-party-advisory

Open in Interactive Console →