CVE-2015-0312

flash-plugin: multiple critical vulnerabilities (APSA15-01)(APSB15-03)

Severity Score

9.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16.0.0.296 on Windows and OS X and before 11.2.202.440 on Linux allows attackers to execute arbitrary code via unspecified vectors.

Vulnerabilidad de doble liberación en Adobe Flash Player anterior a 13.0.0.264 y 14.x hasta 16.x anterior a 16.0.0.296 en Windows y OS X y anterior a 11.2.202.440 en Linux permite a atacantes ejecutar código arbitrario a través de vectores no especificados.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2014-12-01 CVE Reserved
2015-01-28 CVE Published
2023-10-05 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-415: Double Free

CAPEC

References (10)

URL	Tag	Source
http://secunia.com/advisories/62432	Third Party Advisory
http://secunia.com/advisories/62543	Third Party Advisory
http://secunia.com/advisories/62660	Third Party Advisory
http://www.securityfocus.com/bid/72343	Third Party Advisory
http://www.securitytracker.com/id/1031634	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/100394	Third Party Advisory
https://technet.microsoft.com/library/security/2755801	Third Party Advisory

URL	Date	SRC

URL	Date	SRC
http://helpx.adobe.com/security/products/flash-player/apsb15-03.html	2021-09-08

URL	Date	SRC
https://access.redhat.com/security/cve/CVE-2015-0312	2015-01-27
https://bugzilla.redhat.com/show_bug.cgi?id=1185296	2015-01-27

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	<= 11.2.202.438 Search vendor "Adobe" for product "Flash Player" and version " <= 11.2.202.438"	-	Affected	in	Linux Search vendor "Linux"	Linux Kernel Search vendor "Linux" for product "Linux Kernel"	-	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	<= 16.0.0.287 Search vendor "Adobe" for product "Flash Player" and version " <= 16.0.0.287"	-	Affected	in	Microsoft Search vendor "Microsoft"	Internet Explorer Search vendor "Microsoft" for product "Internet Explorer"	10 Search vendor "Microsoft" for product "Internet Explorer" and version "10"	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	<= 16.0.0.287 Search vendor "Adobe" for product "Flash Player" and version " <= 16.0.0.287"	-	Affected	in	Microsoft Search vendor "Microsoft"	Internet Explorer Search vendor "Microsoft" for product "Internet Explorer"	11 Search vendor "Microsoft" for product "Internet Explorer" and version "11"	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	<= 16.0.0.287 Search vendor "Adobe" for product "Flash Player" and version " <= 16.0.0.287"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 8 Search vendor "Microsoft" for product "Windows 8"	-	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	<= 16.0.0.287 Search vendor "Adobe" for product "Flash Player" and version " <= 16.0.0.287"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 8.1 Search vendor "Microsoft" for product "Windows 8.1"	-	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	<= 16.0.0.287 Search vendor "Adobe" for product "Flash Player" and version " <= 16.0.0.287"	chrome	Affected	in	Apple Search vendor "Apple"	Macos Search vendor "Apple" for product "Macos"	-	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	<= 16.0.0.287 Search vendor "Adobe" for product "Flash Player" and version " <= 16.0.0.287"	chrome	Affected	in	Linux Search vendor "Linux"	Linux Kernel Search vendor "Linux" for product "Linux Kernel"	-	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	<= 16.0.0.287 Search vendor "Adobe" for product "Flash Player" and version " <= 16.0.0.287"	chrome	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	-	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	<= 13.0.0.262 Search vendor "Adobe" for product "Flash Player" and version " <= 13.0.0.262"	extended_support	Affected	in	Apple Search vendor "Apple"	Macos Search vendor "Apple" for product "Macos"	-	-	Safe
Adobe Search vendor "Adobe"	Flash Player Search vendor "Adobe" for product "Flash Player"	<= 13.0.0.262 Search vendor "Adobe" for product "Flash Player" and version " <= 13.0.0.262"	extended_support	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	-	-	Safe
Adobe Search vendor "Adobe"	Flash Player Desktop Runtime Search vendor "Adobe" for product "Flash Player Desktop Runtime"	<= 16.0.0.287 Search vendor "Adobe" for product "Flash Player Desktop Runtime" and version " <= 16.0.0.287"	-	Affected	in	Apple Search vendor "Apple"	Macos Search vendor "Apple" for product "Macos"	-	-	Safe
Adobe Search vendor "Adobe"	Flash Player Desktop Runtime Search vendor "Adobe" for product "Flash Player Desktop Runtime"	<= 16.0.0.287 Search vendor "Adobe" for product "Flash Player Desktop Runtime" and version " <= 16.0.0.287"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	-	-	Safe