CVE-2015-3090

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172…

published May 13, 2015

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.

CVSS
—
EPSS
83%
Percentile
99.7
In the wild
Unconfirmed
What it is

💡 A little-known vulnerability in Adobe Flash Player can let attackers execute arbitrary code, pretty much going through the back door of your computer! 🚪💻 Think of it like a hotel with a broken lock on the back entrance. Anyone could pop in and cause chaos without needing a key, all while the front desk thinks everything is fine. If exploited, an attacker could run any code they want on your machine, leading to data theft or even crashes—it's like inviting a stranger into your home to rearrange your furniture... or worse! The implications can be absolutely devastating if sensitive information is compromised or if your system becomes unusable.

Put simply

Think of it like a hotel with a broken lock on the back entrance. Anyone could pop in and cause chaos without needing a key, all while the front desk thinks everything is fine. This vulnerability allows for memory corruption in Adobe Flash Player, prior to specific versions, potentially letting attackers execute arbitrary code under the user’s privileges, much like a troublesome guest taking over the management of the hotel without permission.

What to do

If exploited, an attacker could run any code they want on your machine, leading to data theft or even crashes—it's like inviting a stranger into your home to rearrange your furniture... or worse! The implications can be absolutely devastating if sensitive information is compromised or if your system becomes unusable. To protect yourself, ensure you’re running Adobe Flash Player and AIR versions updated to at least 17.0.0.188 and 17.0.0.172, respectively. Regularly check for updates and consider uninstalling Flash Player entirely, as it's become a common target for exploits. You've got this! Stay vigilant and keep your software updated! 🦸‍♀️🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.83180 · 99.7th percentile
Published
2015-05-13T10:00Z
EPSS history
Timeline
  • 13 MAY 10:00Z
    Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172…
    cvelistv5