CVE-2015-3113

Description

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

92.42

Associated Vulnerability

Vulnerability	OS Platform
Upgrade Adobe flash player 18.0.0.161 to latest version	Windows
Vulnerabilities CVE-2015-3113 are affected in Adobe Flash Player Plugin 18.0.0.161	Windows
Vulnerabilities CVE-2015-3113 are affected in Adobe Flash Player PPAPI 18.0.0.161	Windows
Out-of-bounds Write Vulnerability (CVE-2015-3113)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234