CVE-2015-3087

Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe…

published May 13, 2015

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
74%
Percentile
99.5
In the wild
Unconfirmed
What it is

⚠️ An integer overflow in Adobe Flash Player could let attackers execute arbitrary code like a magician pulling rabbits out of thin air—unpredictable and alarming! 🔥 Think of this vulnerability as a pothole on a busy road. If a driver isn't paying attention, they might hit it hard enough to cause a serious accident—here, the pothole allows malicious code to sneak in through unforeseen cracks. If successfully exploited, this could allow an attacker to run arbitrary code on your system—potentially leading to data theft, malware installation, or complete system takeover! It's like giving a stranger the keys to your house when you thought you were just letting them borrow a tool.

Put simply

Think of this vulnerability as a pothole on a busy road. If a driver isn't paying attention, they might hit it hard enough to cause a serious accident—here, the pothole allows malicious code to sneak in through unforeseen cracks. The vulnerability arises from an integer overflow in Adobe Flash Player and Adobe AIR products, which can be exploited through unspecified vectors to execute unauthorized code.

What to do

If successfully exploited, this could allow an attacker to run arbitrary code on your system—potentially leading to data theft, malware installation, or complete system takeover! It's like giving a stranger the keys to your house when you thought you were just letting them borrow a tool. Update Adobe Flash Player to version 13.0.0.289 or later, and Adobe AIR to version 17.0.0.172 or later as soon as possible. Regularly check for updates and implement security best practices to minimize risk. This is fixable! Follow these steps and you'll be back on solid ground in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.74294 · 99.5th percentile
Published
2015-05-13T10:00Z
EPSS history
Timeline
  • 13 MAY 10:00Z
    Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe…
    cvelistv5