CVE-2015-0311

Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
Affected Products (NVD)
VendorProductVersion
adobeflash_player
𝑥
≤ 11.2.202.438
adobeflash_player
𝑥
≤ 13.0.0.262
adobeflash_player
14.0.0.125 ≤
𝑥
< 16.0.0.287
microsoftedge
-
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
adobe-flashplugin
lucid
ignored
precise
Fixed 11.2.202.429-0precise1
released
trusty
Fixed 11.2.202.429-0trusty1
released
utopic
Fixed 11.2.202.429-0utopic1
released
flashplugin-nonfree
lucid
ignored
precise
Fixed 11.2.202.429ubuntu0.12.04.1
released
trusty
Fixed 11.2.202.429ubuntu0.14.04.1
released
utopic
Fixed 11.2.202.429ubuntu0.14.10.1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
flash-player
suse enterprise desktop 12
11.2.202.440-31.1
fixed
suse enterprise desktop 12 SP1
11.2.202.548-111.1
fixed
suse enterprise sap 12
11.2.202.440-31.1
fixed
suse enterprise sap 12 SP1
11.2.202.548-111.1
fixed
suse enterprise server 12
11.2.202.440-31.1
fixed
suse enterprise server 12 SP1
11.2.202.548-111.1
fixed
suse enterprise workstation 12
11.2.202.440-31.1
fixed
suse enterprise workstation 12 SP1
11.2.202.548-111.1
fixed
flash-player-gnome
suse enterprise desktop 12
11.2.202.440-31.1
fixed
suse enterprise desktop 12 SP1
11.2.202.548-111.1
fixed
suse enterprise sap 12
11.2.202.440-31.1
fixed
suse enterprise sap 12 SP1
11.2.202.548-111.1
fixed
suse enterprise server 12
11.2.202.440-31.1
fixed
suse enterprise server 12 SP1
11.2.202.548-111.1
fixed
suse enterprise workstation 12
11.2.202.440-31.1
fixed
suse enterprise workstation 12 SP1
11.2.202.548-111.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
flash-plugin
RHEL 6
0:11.2.202.440-1.el6
fixed
References
http://helpx.adobe.com/security/products/flash-player/apsa15-01.html
http://helpx.adobe.com/security/products/flash-player/apsb15-03.html
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00027.html
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00031.html
http://malware.dontneedcoffee.com/2015/01/unpatched-vulnerability-0day-in-flash.html
http://secunia.com/advisories/62432
http://secunia.com/advisories/62543
http://secunia.com/advisories/62650
http://secunia.com/advisories/62660
http://secunia.com/advisories/62740
http://security.gentoo.org/glsa/glsa-201502-02.xml
http://www.securityfocus.com/bid/72283
http://www.securitytracker.com/id/1031597
https://technet.microsoft.com/library/security/2755801
http://helpx.adobe.com/security/products/flash-player/apsa15-01.html
http://helpx.adobe.com/security/products/flash-player/apsb15-03.html
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00027.html
http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00031.html
http://malware.dontneedcoffee.com/2015/01/unpatched-vulnerability-0day-in-flash.html
http://secunia.com/advisories/62432
http://secunia.com/advisories/62543
http://secunia.com/advisories/62650
http://secunia.com/advisories/62660
http://secunia.com/advisories/62740
http://security.gentoo.org/glsa/glsa-201502-02.xml
http://www.securityfocus.com/bid/72283
http://www.securitytracker.com/id/1031597
https://technet.microsoft.com/library/security/2755801
https://github.com/cisagov/vulnrichment/issues/196
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-0311