PT-2015-1293 · Adobe+3 · Air+4

Published 2015-06-09 · Updated 2016-12-31 · CVE-2015-3103

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player (affected versions not specified) Adobe AIR (affected versions not specified) ALT Linux (affected versions not specified)

Description The issue is related to the use of memory after it has been freed, which can allow a remote attacker to execute arbitrary code. This can be exploited by a remote attacker to gain control over the system.

Recommendations For Adobe Flash Player, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Adobe AIR, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For ALT Linux, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2015-1526

BDU:2015-10333

BDU:2015-10334

BDU:2015-10335

BDU:2015-10336

CVE-2015-3103

MGASA-2015-0248

OPENSUSE-SU-2015_1047-1

RHSA-2015:1086

RHSA-2015_1086

SUSE-SU-2015:1043-1

Affected Products

Alt Linux

Air

Flash Player

Red Hat

Suse

References · 124

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/adobe_flash_shader_drawing_fill.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3103 · Security Note
• https://bdu.fstec.ru/vul/2015-10915 · Security Note
• https://bdu.fstec.ru/vul/2015-10344 · Security Note
• https://osv.dev/vulnerability/MGASA-2015-0248 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10334 · Security Note
• https://bdu.fstec.ru/vul/2015-10909 · Security Note
• https://bdu.fstec.ru/vul/2015-10898 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2015:1043-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3099 · Security Note
• https://security.gentoo.org/glsa/201506-01 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10906 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3098 · Security Note
• https://bdu.fstec.ru/vul/2015-10905 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00009.html · Vendor Advisory