Skip to content

CVE-2015-3083 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Ado...

MediumCVSS 6.4 EPSS 41.1% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3082 and CVE-2015-3085.

Affected products

ProductAffected versionsFixed in
Adobe flash player <= 11.2.202.475 No fix listed
Adobe flash player <= 13.0.0.264 No fix listed
Adobe flash player = 14.0.0.125 No fix listed
Adobe flash player = 14.0.0.145 No fix listed
Adobe flash player = 14.0.0.176 No fix listed
Adobe flash player = 14.0.0.179 No fix listed
Adobe flash player = 15.0.0.152 No fix listed
Adobe flash player = 15.0.0.167 No fix listed
Adobe flash player = 15.0.0.189 No fix listed
Adobe flash player = 15.0.0.223 No fix listed
Adobe flash player = 15.0.0.239 No fix listed
Adobe flash player = 15.0.0.246 No fix listed
Adobe flash player = 16.0.0.235 No fix listed
Adobe flash player = 16.0.0.257 No fix listed
Adobe flash player = 16.0.0.287 No fix listed
Adobe flash player = 16.0.0.296 No fix listed
Adobe flash player = 17.0.0.134 No fix listed
Adobe flash player = 17.0.0.169 No fix listed
Adobe air <= 17.0.0.144 No fix listed
Adobe air sdk <= 17.0.0.144 No fix listed
Adobe air sdk compiler <= 17.0.0.144 No fix listed

References