CVE-2015-3105

Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144…

published June 10, 2015

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.8th percentile for exploit probability.

CVSS
—
EPSS
90%
Percentile
99.8
In the wild
Unconfirmed
What it is

⚠️ Flash Player might be a blast from the past, but it has a vulnerability that allows attackers to execute arbitrary code at will! Just imagine having a ticket to the concert without actually buying one. 🎟️ This vulnerability is like a faulty airline ticket system that lets anyone slip through security without a valid ID. Attackers can board the digital flight and wreak havoc, just like a passenger with a fake ticket turning the cabin upside down! If exploited, an attacker could gain control over your system or cause a complete denial of service—the digital equivalent of a plane going down mid-flight. This could lead to data leaks or system crashes that leave users stranded and vulnerable.

Put simply

This vulnerability is like a faulty airline ticket system that lets anyone slip through security without a valid ID. Attackers can board the digital flight and wreak havoc, just like a passenger with a fake ticket turning the cabin upside down! This vulnerability in Adobe Flash Player and Adobe AIR versions allows memory corruption, which can let attackers execute arbitrary code through unspecified vectors, bypassing security measures and taking over the system.

What to do

If exploited, an attacker could gain control over your system or cause a complete denial of service—the digital equivalent of a plane going down mid-flight. This could lead to data leaks or system crashes that leave users stranded and vulnerable. To safeguard against this threat, immediately update Adobe Flash Player to version 13.0.0.292 or higher, and check Adobe AIR to ensure it's updated to at least 18.0.0.144. Regularly monitor for updates and implement security patches as they become available. You've got this! With swift action, you can shield your systems from this vulnerability and keep the digital skies clear! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.90135 · 99.8th percentile
Published
2015-06-10T01:00Z
EPSS history
Timeline
  • 24 AUG 22:58Z
    EPSS moved 83% → 96%
    epss
  • 10 JUN 01:00Z
    Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144…
    cvelistv5