Attacker Value
Unknown
CVE-2015-3113
CVE-2015-3113
(Last updated July 03, 2024) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Metasploit Module
Description
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.
Add Assessment
1
Technical Analysis
Reported as exploited in the wild as part of Google’s 2020 0day vulnerability spreadsheet they made available at https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit#gid=1869060786. Original tweet announcing this spreadsheet with the 2020 findings can be found at https://twitter.com/maddiestone/status/1329837665378725888
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
9.8 Critical
Impact Score:
5.9
Exploitability Score:
3.9
Attack Vector (AV):
Network
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
High
General Information
Vendors
- adobe,
- hp,
- opensuse,
- redhat,
- suse
Products
- enterprise linux desktop 6.0,
- enterprise linux eus 6.6,
- enterprise linux server 6.0,
- enterprise linux workstation 6.0,
- evergreen 11.4,
- flash player,
- insight orchestration,
- linux enterprise desktop 12,
- linux enterprise workstation extension 12,
- opensuse 13.1,
- opensuse 13.2,
- system management homepage,
- systems insight manager,
- version control agent,
- version control repository manager,
- version control repository manager 7.6,
- virtual connect enterprise manager
Metasploit Modules
Exploited in the Wild
References
Advisory
