Skip to content

CVE-2015-3080 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AI...

HighCVSS 10.0 EPSS 56.6% PoC
Published
Updated
Exploit status
Proof-of-concept only
Sign in for asset impact Search another CVE

Description

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.

Affected products

ProductAffected versionsFixed in
Adobe flash player <= 13.0.0.264 No fix listed
Adobe flash player = 14.0.0.125 No fix listed
Adobe flash player = 14.0.0.145 No fix listed
Adobe flash player = 14.0.0.176 No fix listed
Adobe flash player = 14.0.0.179 No fix listed
Adobe flash player = 15.0.0.152 No fix listed
Adobe flash player = 15.0.0.167 No fix listed
Adobe flash player = 15.0.0.189 No fix listed
Adobe flash player = 15.0.0.223 No fix listed
Adobe flash player = 15.0.0.239 No fix listed
Adobe flash player = 15.0.0.246 No fix listed
Adobe flash player = 16.0.0.235 No fix listed
Adobe flash player = 16.0.0.257 No fix listed
Adobe flash player = 16.0.0.287 No fix listed
Adobe flash player = 16.0.0.296 No fix listed
Adobe flash player = 17.0.0.134 No fix listed
Adobe flash player = 17.0.0.169 No fix listed
Adobe flash player <= 11.2.202.475 No fix listed
Adobe air <= 17.0.0.144 No fix listed
Adobe air sdk <= 17.0.0.144 No fix listed
Adobe air sdk compiler <= 17.0.0.144 No fix listed

References