IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.8Alta KEV

CVE-2015-3113Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

adobe flash player; opensuse evergreen; opensuse opensuse; suse linux enterprise desktop Publicada: (hace 11 años)

Explotación conocida — Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

CISA confirmó el 13.04.2022 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 04.05.2022.

Acción requerida: The impacted product is end-of-life and should be disconnected if still in use. https://nvd.nist.gov/vuln/detail/CVE-2015-3113

Descripción

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.

Debilidad (CWE): CWE-122CWE-787

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
adobe flash player < 13.0.0.296
hp insight orchestration < 7.5.0
hp system management homepage < 7.5.0
hp systems insight manager < 7.5
hp version control agent < 7.5.0
hp version control repository manager < 7.5.0
hp virtual connect enterprise manager < 7.5.0
opensuse evergreen 11.4
opensuse opensuse 13.1
redhat enterprise linux desktop 6.0
redhat enterprise linux eus 6.6
redhat enterprise linux server 6.0
redhat enterprise linux workstation 6.0
suse linux enterprise desktop 12
suse linux enterprise workstation extension 12

Referencias y parches

Coincidencias CPE (NVD) (19)
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* < 13.0.0.296
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* ≥ 14.0.0.125 < 18.0.0.194
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* < 11.2.202.468
  • cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*
  • cpe:2.3:a:hp:insight_orchestration:*:*:*:*:*:*:*:* < 7.5.0
  • cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:* < 7.5.0
  • cpe:2.3:a:hp:systems_insight_manager:*:*:*:*:*:*:*:* < 7.5
  • cpe:2.3:a:hp:version_control_agent:*:*:*:*:*:*:*:* < 7.5.0
  • cpe:2.3:a:hp:version_control_repository_manager:*:*:*:*:*:*:*:* < 7.5.0
  • cpe:2.3:a:hp:version_control_repository_manager:7.6:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:virtual_connect_enterprise_manager:*:*:*:*:*:*:*:* < 7.5.0
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_eus:6.6:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

CVE recientes del mismo producto — Red Hat Enterprise Linux

6.5Media
CVE-2026-121259

Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in the GStreamer JPEG 2000 decimator in gst-plugins-bad. Crafted JPEG 2000 media can cause integer overflows or division by zero during tile processing. An application that processes the malicious media may crash, resulting in a denial of service.

6.5Media
CVE-2026-119843

Gst-plugins-good: assertion failures in FLV demuxer when parsing malformed enhanced audio/video tags

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly validate buffer sizes and data availability when processing enhanced audio and video tags in malformed or truncated FLV streams. A remote attacker could exploit …

6.5Media
CVE-2026-120831

Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat OpenShift Container Platform 4

A flaw was found in libslirp in if_output(). When moving a session from the fast queue to the batch queue, the code unlinked and reinserted an arbitrary packet via ifm->m_nextpkt instead of the session queue head, corrupting queue pointers. A guest generating…

7.4Alta
CVE-2026-120830

Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat OpenShift Container Platform 4

A flaw was found in libslirp in icmp_forward_error(). When building an ICMP error response, the length of the quoted original IPv4 packet was taken from the IP header without clamping it to the actual buffer length. A truncated or malformed packet could cause…

2.0Baja
CVE-2026-120740

Hivex: hivex: denial of service via out-of-bounds read in big-data block processing

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application pr…

7.5Alta
CVE-2026-120194

Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a ha…