7.8Yüksek KEV

CVE-2015-5119Adobe Flash Player Use-After-Free Vulnerability

adobe flash player; redhat enterprise linux desktop; redhat enterprise linux eus; redhat enterprise linux server Yayım: 2015-07-08 17:00 (11 yıl önce)

Aktif olarak istismar ediliyor — Adobe Flash Player Use-After-Free Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 03.03.2022 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 24.03.2022.

Gerekli işlem: The impacted product is end-of-life and should be disconnected if still in use. https://nvd.nist.gov/vuln/detail/CVE-2015-5119

Açıklama

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.

Zayıflık türü (CWE): CWE-416

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
adobe	flash player	13.0.0.182 – ≤ 13.0.0296
opensuse	evergreen	11.4
opensuse	opensuse	13.1
redhat	enterprise linux desktop	5.0
redhat	enterprise linux eus	6.6
redhat	enterprise linux server	5.0
redhat	enterprise linux server aus	6.6
redhat	enterprise linux server from rhui	5.0
redhat	enterprise linux workstation	5.0
suse	linux enterprise desktop	11
suse	linux enterprise workstation extension	12

Kaynaklar ve yamalar

1032809 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
75568 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
openSUSE-SU-2015:1207 vendor-advisoryMailing ListThird Party Advisory
TA15-195A third-party-advisoryThird Party AdvisoryUS Government Resource
SUSE-SU-2015:1211 vendor-advisoryMailing ListThird Party Advisory
RHSA-2015:1214 vendor-advisoryThird Party Advisory
SUSE-SU-2015:1214 vendor-advisoryMailing ListThird Party Advisory
GLSA-201507-13 vendor-advisoryThird Party Advisory
http://www.rapid7.com/db/modules/exploit/multi/browser/adobe_flash_hacking_team_uaf Third Party Advisory
https://helpx.adobe.com/security/products/flash-player/apsa15-03.html Broken LinkPatchVendor Advisory
VU#561288 third-party-advisoryThird Party AdvisoryUS Government Resource
https://helpx.adobe.com/security/products/flash-player/apsb15-16.html Broken LinkPatchVendor Advisory
https://packetstormsecurity.com/files/132600/Adobe-Flash-Player-ByteArray-Use-After-Free.html ExploitThird Party AdvisoryVDB Entry
openSUSE-SU-2015:1210 vendor-advisoryMailing ListThird Party Advisory
http://blog.trendmicro.com/trendlabs-security-intelligence/unpatched-flash-player-flaws-more-pocs-found-in-ha… Broken Link
http://twitter.com/w3bd3vil/statuses/618168863708962816 Broken Link
https://github.com/cisagov/vulnrichment/issues/196 Issue Tracking
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5119 US Government Resource

CPE eşleşmeleri (NVD) (20)

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* ≥ 13.0.0.182 ≤ 13.0.0296
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* ≥ 14.0.0.125 ≤ 18.0.0.194
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* ≤ 11.2.202.468
cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:6.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*

CVSS puanı

7.8Yüksek

Kaynak: CISA-ADP · CVSS 3.1

Saldırı yolu: Yerel
Karmaşıklık: Düşük
Gereken yetki: Yok
Kullanıcı etkileşimi: Gerekir
Kapsam: Değişmez
Gizlilik: Yüksek
Bütünlük: Yüksek
Erişilebilirlik: Yüksek

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tüm puanlar (4)

CISA-ADP	CVSS 3.1	7.8Yüksek
nvd	CVSS 3.1	9.8Kritik
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	7.8Yüksek
nvd	CVSS 2.0	10.0Yüksek

EPSS (30 günde istismar olasılığı)

98.62%

tüm CVE'lerin %100'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: active
Otomatikleştirilebilir: no
Teknik etki: total

Zaman çizelgesi

Numara ayrıldı2015-06-26
Yayımlandı2015-07-08 17:00
IP-DB'ye ulaştı2026-10-24 23:34
KEV'e eklendi2022-03-03
Son güncelleme2026-06-17 03:28

Numarayı veren (CNA): adobe
NVD durumu: Analyzed

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Red Hat Enterprise Linux

4.4Orta

CVE-2026-123876 dün

Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Hardened Images

A flaw was found in the default seccomp profile used by Podman via containers-common. Deny rules for AF_VSOCK and NETLINK_AUDIT compared socket arguments with unmasked 64-bit equality. Because the kernel truncates those int arguments to 32 bits, setting upper…

6.2Orta

CVE-2026-120749 2 gün önce

Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in D-Bus. With a privileged Monitoring client attached (for example dbus-monitor or busctl monitor), an unprivileged local user can cause dbus-daemon to abort if a driver-originated broadcast such as NameOwnerChanged or ActivatableServicesCha…

6.7Orta

CVE-2026-123037 2 gün önce

Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)

Red Hat Migration Toolkit for Applications 8; Red Hat Migration Toolkit for Virtualization; Red Hat OpenShift Service Mesh 3; Red Hat Red Hat Advanced Cluster Management for Kubernetes 2

A flaw was found in the ansible-core user module. When generate_ssh_key is enabled, User.ssh_key_gen() guards the key files against symlinks but checks the ~/.ssh directory only with os.path.exists(). An unprivileged user on a managed node who replaces their …

7.5Yüksek

CVE-2026-123151 2 gün önce

Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow the target to execute arbitr…

8.1Yüksek

CVE-2026-121997 2 gün önce

Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actua…

8.2Yüksek

CVE-2026-121996 2 gün önce

Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A length validation flaw in gdbserver's agent-expression parser allows an unauthenticated remote attacker to read uninitialized heap memory from the gdbserver process and cause a denial of service. Disclosed heap content includes addresses suitable for defeat…