ByteOS Network

NVD Vulnerability Details :

CVE-2015-0313

Deferred

Known KEV

More Info Official Page

Source-psirt@adobe.com

View Known Exploited Vulnerability (KEV) details

Published At-02 Feb, 2015 | 19:59

Updated At-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2022-04-13	2022-05-04	Adobe Flash Player Use-After-Free Vulnerability	The impacted product is end-of-life and should be disconnected if still in use.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Adobe Inc.

>>flash_player>>Versions before 11.2.202.442(exclusive)

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>-

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>Versions before 13.0.0.269(exclusive)

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>Versions from 14.0.0.125(inclusive) to 16.0.0.305(exclusive)

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>-

cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>-

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

openSUSE

>>evergreen>>11.4

cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*

openSUSE

>>opensuse>>13.1

cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

openSUSE

>>opensuse>>13.2

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

SUSE

>>linux_enterprise_desktop>>11

cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*

SUSE

>>linux_enterprise_desktop>>12

cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*

SUSE

>>linux_enterprise_workstation_extension>>12

cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*

Microsoft Corporation

>>internet_explorer>>10

cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_8>>-

cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_rt>>-

cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2012>>-

cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

Microsoft Corporation

>>internet_explorer>>11

cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*

Microsoft Corporation

>>windows_10_1507>>-

cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_8.1>>-

cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_rt_8.1>>-

cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2012>>r2

cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

Microsoft Corporation

>>edge>>-

cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_10_1507>>-

cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-416	Primary	nvd@nist.gov
CWE-416	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00006.html	psirt@adobe.com	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00007.html	psirt@adobe.com	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00008.html	psirt@adobe.com	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00009.html	psirt@adobe.com	Mailing List Third Party Advisory
http://packetstormsecurity.com/files/131189/Adobe-Flash-Player-ByteArray-With-Workers-Use-After-Free.html	psirt@adobe.com	Exploit Third Party Advisory VDB Entry
http://secunia.com/advisories/62528	psirt@adobe.com	Broken Link
http://secunia.com/advisories/62777	psirt@adobe.com	Broken Link
http://secunia.com/advisories/62895	psirt@adobe.com	Broken Link
http://www.osvdb.org/117853	psirt@adobe.com	Broken Link
http://www.securityfocus.com/bid/72429	psirt@adobe.com	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1031686	psirt@adobe.com	Broken Link Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100641	psirt@adobe.com	Third Party Advisory VDB Entry
https://helpx.adobe.com/security/products/flash-player/apsa15-02.html	psirt@adobe.com	Vendor Advisory
https://helpx.adobe.com/security/products/flash-player/apsb15-04.html	psirt@adobe.com	Broken Link
https://technet.microsoft.com/library/security/2755801	psirt@adobe.com	Patch Vendor Advisory
https://www.exploit-db.com/exploits/36579/	psirt@adobe.com	Exploit Third Party Advisory VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00006.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00007.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00008.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00009.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://packetstormsecurity.com/files/131189/Adobe-Flash-Player-ByteArray-With-Workers-Use-After-Free.html	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory VDB Entry
http://secunia.com/advisories/62528	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://secunia.com/advisories/62777	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://secunia.com/advisories/62895	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.osvdb.org/117853	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.securityfocus.com/bid/72429	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1031686	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100641	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://helpx.adobe.com/security/products/flash-player/apsa15-02.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://helpx.adobe.com/security/products/flash-player/apsb15-04.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
https://technet.microsoft.com/library/security/2755801	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://www.exploit-db.com/exploits/36579/	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory VDB Entry

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History