VDB

CVE-2015-5119

CVE-2015-5119 PUBLISHED KEV

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.

EPSS 93.20% · 99.8th percentile

Risk Scores

EPSS Score
93.20%
99.8th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSflashplugin-nonfree11.2.202.327ubuntu0.13.10.1, 11.2.202.332ubuntu1, 11.2.202.335ubuntu1

Exploit Intelligence

…and 178 more exploits

Timeline

  • Jan 19, 1970 VulnCheck XDB Entry
  • Jul 5, 2015 VulnCheck KEV Exploitation
  • Jul 8, 2015 PoC Published
  • Jul 8, 2015 PoC Published
  • Jul 8, 2015 PoC Published
  • Jul 8, 2015 CVE Published
  • Jul 9, 2015 PoC Published
  • Jul 13, 2015 PoC Published
  • Jul 21, 2015 VulnCheck KEV Exploitation
  • Jul 24, 2015 PoC Published
  • Aug 10, 2015 VulnCheck KEV Exploitation
  • Aug 11, 2015 PoC Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›