CVE-2015-3084

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172…

published May 13, 2015

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

⚠️ A hidden type confusion vulnerability lurks in Adobe Flash Player and Adobe AIR that could let attackers execute arbitrary code. 🔥 Think of a restaurant where a waiter delivers the wrong dish because they mixed up orders — this vulnerability lets attackers serve up code that shouldn’t be on the menu, creating a messy situation. If exploited, this could allow an attacker to run any code on your system, potentially leading to unauthorized access, data theft, or even complete system takeover. It's a digital diner disaster waiting to happen!

Put simply

Think of a restaurant where a waiter delivers the wrong dish because they mixed up orders — this vulnerability lets attackers serve up code that shouldn’t be on the menu, creating a messy situation. This vulnerability arises from a type confusion issue in Adobe Flash Player and Adobe AIR, allowing an attacker to manipulate object types, ultimately leading to arbitrary code execution.

What to do

If exploited, this could allow an attacker to run any code on your system, potentially leading to unauthorized access, data theft, or even complete system takeover. It's a digital diner disaster waiting to happen! Update Adobe Flash Player to version 13.0.0.289 or higher, and for Adobe AIR, make sure you’re at version 17.0.0.172 or above. Regularly check for software updates to keep your systems secure! You've got this! Follow these steps, and you'll be serving up a more secure environment in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06744 · 93.9th percentile
Published
2015-05-13T10:00Z
EPSS history
Timeline
  • 13 MAY 10:00Z
    Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172…
    cvelistv5