CVE-2015-3043
CriticalActively exploited (CISA KEV)
Description
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Adobe Flash Player
PublishedApr 14, 2015
First seenApr 14, 2015
Added to KEVMar 3, 2022
Weakness typeCWE-787Out-of-bounds write
How to fix
CISA required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA due date: Mar 24, 2022Update
- adobe flash_player11.2.202.457, 13.0.0.281, 17.0.0.169 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adobe flash_player | v < 11.2.202.457, v < 13.0.0.281, 14.0.0.125 ≤ v < 17.0.0.169 | 11.2.202.457, 13.0.0.281, 17.0.0.169 |
| novell suse_linux_enterprise_desktop | 11.0, 12.0 | — |
| novell suse_linux_enterprise_workstation_extension | 12.0 | — |
| opensuse evergreen | 11.4 | — |
| opensuse opensuse | 13.1, 13.2 | — |
| redhat enterprise_linux_desktop | 5.0, 6.0 | — |
| redhat enterprise_linux_eus | 6.6 | — |
| redhat enterprise_linux_server | 5.0, 6.0 | — |
| redhat enterprise_linux_server_aus | 6.6 | — |
| redhat enterprise_linux_server_from_rhui | 5.0, 6.0 | — |
| redhat enterprise_linux_workstation | 5.0, 6.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.