PT-2015-1296 · Adobe+3 · Air+4

Bilou · Published 2015-06-09 · Updated 2017-09-17 · CVE-2015-3106

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player (affected versions not specified) Adobe AIR (affected versions not specified) ALT Linux (affected versions not specified)

Description The issue is related to the use of memory after it has been freed, which can allow a remote attacker to execute arbitrary code. This can be exploited by a remote attacker to gain control over the system.

Recommendations For Adobe Flash Player, update to a version that includes a fix for the memory use-after-free issue. For Adobe AIR, update to a version that includes a fix for the memory use-after-free issue. For ALT Linux, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2015-1526

BDU:2015-10345

BDU:2015-10346

BDU:2015-10347

BDU:2015-10348

CVE-2015-3106

MGASA-2015-0248

OPENSUSE-SU-2015_1047-1

RHSA-2015:1086

RHSA-2015_1086

SUSE-SU-2015:1043-1

Affected Products

Alt Linux

Air

Flash Player

Red Hat

Suse

References · 125

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/adobe_flash_shader_drawing_fill.rb · Exploit
• 🔥 https://exploit-db.com/exploits/37847 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3103 · Security Note
• https://bdu.fstec.ru/vul/2015-10915 · Security Note
• https://bdu.fstec.ru/vul/2015-10344 · Security Note
• https://osv.dev/vulnerability/MGASA-2015-0248 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10334 · Security Note
• https://bdu.fstec.ru/vul/2015-10909 · Security Note
• https://bdu.fstec.ru/vul/2015-10898 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2015:1043-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3099 · Security Note
• https://security.gentoo.org/glsa/201506-01 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10906 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3098 · Security Note
• https://bdu.fstec.ru/vul/2015-10905 · Security Note