7.8Hoch KEV

CVE-2015-5119Adobe Flash Player Use-After-Free Vulnerability

adobe flash player; redhat enterprise linux desktop; redhat enterprise linux eus; redhat enterprise linux server Veröffentlicht: 2015-07-08 17:00 (vor 11 Jahren)

Bekannt ausgenutzt — Adobe Flash Player Use-After-Free Vulnerability

CISA hat am 03.03.2022 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 24.03.2022.

Erforderliche Maßnahme: The impacted product is end-of-life and should be disconnected if still in use. https://nvd.nist.gov/vuln/detail/CVE-2015-5119

Beschreibung

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.

Schwachstellentyp (CWE): CWE-416

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
adobe	flash player	13.0.0.182 – ≤ 13.0.0296
opensuse	evergreen	11.4
opensuse	opensuse	13.1
redhat	enterprise linux desktop	5.0
redhat	enterprise linux eus	6.6
redhat	enterprise linux server	5.0
redhat	enterprise linux server aus	6.6
redhat	enterprise linux server from rhui	5.0
redhat	enterprise linux workstation	5.0
suse	linux enterprise desktop	11
suse	linux enterprise workstation extension	12

Referenzen und Patches

1032809 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
75568 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
openSUSE-SU-2015:1207 vendor-advisoryMailing ListThird Party Advisory
TA15-195A third-party-advisoryThird Party AdvisoryUS Government Resource
SUSE-SU-2015:1211 vendor-advisoryMailing ListThird Party Advisory
RHSA-2015:1214 vendor-advisoryThird Party Advisory
SUSE-SU-2015:1214 vendor-advisoryMailing ListThird Party Advisory
GLSA-201507-13 vendor-advisoryThird Party Advisory
http://www.rapid7.com/db/modules/exploit/multi/browser/adobe_flash_hacking_team_uaf Third Party Advisory
https://helpx.adobe.com/security/products/flash-player/apsa15-03.html Broken LinkPatchVendor Advisory
VU#561288 third-party-advisoryThird Party AdvisoryUS Government Resource
https://helpx.adobe.com/security/products/flash-player/apsb15-16.html Broken LinkPatchVendor Advisory
https://packetstormsecurity.com/files/132600/Adobe-Flash-Player-ByteArray-Use-After-Free.html ExploitThird Party AdvisoryVDB Entry
openSUSE-SU-2015:1210 vendor-advisoryMailing ListThird Party Advisory
http://blog.trendmicro.com/trendlabs-security-intelligence/unpatched-flash-player-flaws-more-pocs-found-in-ha… Broken Link
http://twitter.com/w3bd3vil/statuses/618168863708962816 Broken Link
https://github.com/cisagov/vulnrichment/issues/196 Issue Tracking
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5119 US Government Resource

CPE-Treffer (NVD) (20)

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* ≥ 13.0.0.182 ≤ 13.0.0296
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* ≥ 14.0.0.125 ≤ 18.0.0.194
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* ≤ 11.2.202.468
cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:6.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*

CVSS-Score

7.8Hoch

Quelle: CISA-ADP · CVSS 3.1

Angriffsvektor: Lokal
Komplexität: Niedrig
Rechte erforderlich: Keine
Benutzerinteraktion: Erforderlich
Geltungsbereich: Unverändert
Vertraulichkeit: Hoch
Integrität: Hoch
Verfügbarkeit: Hoch

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Alle Scores (4)

CISA-ADP	CVSS 3.1	7.8Hoch
nvd	CVSS 3.1	9.8Kritisch
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	7.8Hoch
nvd	CVSS 2.0	10.0Hoch

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

98.62%

höher als 100 % aller CVEs

CISA-Bewertung (SSVC)

Ausnutzung: active
Automatisierbar: no
Technische Auswirkung: total

Zeitverlauf

ID reserviert2015-06-26
Veröffentlicht2015-07-08 17:00
Bei IP-DB eingegangen2026-10-24 23:34
In KEV aufgenommen2022-03-03
Zuletzt aktualisiert2026-06-17 03:28

Vergeben von (CNA): adobe
NVD-Status: Analyzed

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — Red Hat Enterprise Linux

7.5Hoch

CVE-2026-120194 vor 2 Tagen

Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a ha…

6.5Mittel

CVE-2026-119842 vor 2 Tagen

Gst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDV…

6.5Mittel

CVE-2026-119727 vor 2 Tagen

Gst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computation

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream containing a Screen Content Coding (SCC) extension with certain palette predictor initializer settings, an integer underflow in the upper-boun…

6.5Mittel

CVE-2026-119729 vor 2 Tagen

Gst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of service

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in GStreamer. An integer overflow vulnerability in the AV1 LEB128 variable-length integer parser allows a remote attacker to cause a crash in applications that process AV1 media content. By crafting a malformed AV1 bitstream containing an inv…

5.5Mittel

CVE-2026-119728 vor 2 Tagen

Gst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file with malformed Multiview (MVC) Sequence Parameter Set data, the parser can dereference a NULL pointer during the cleanup of partially allocated…

7.8Hoch

CVE-2026-119777 vor 2 Tagen

Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an a…