First published: Tue Apr 14 2015(Updated: )
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3042, and CVE-2015-3043.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader | <=11.2.202.451 | |
Linux Kernel | ||
redhat enterprise linux desktop supplementary | =5.0 | |
redhat enterprise linux desktop supplementary | =6.0 | |
Red Hat Enterprise Linux Server Supplementary | =5.0 | |
Red Hat Enterprise Linux Server Supplementary | =6.0 | |
Red Hat Enterprise Linux Server Supplementary EUS | =6.6.z | |
Red Hat Enterprise Linux Workstation Supplementary | =6.0 | |
Adobe Acrobat Reader | <=13.0.0.264 | |
Adobe Acrobat Reader | =14.0.0.125 | |
Adobe Acrobat Reader | =14.0.0.145 | |
Adobe Acrobat Reader | =14.0.0.176 | |
Adobe Acrobat Reader | =14.0.0.179 | |
Adobe Acrobat Reader | =15.0.0.152 | |
Adobe Acrobat Reader | =15.0.0.167 | |
Adobe Acrobat Reader | =15.0.0.189 | |
Adobe Acrobat Reader | =15.0.0.223 | |
Adobe Acrobat Reader | =15.0.0.239 | |
Adobe Acrobat Reader | =15.0.0.246 | |
Adobe Acrobat Reader | =16.0.0.235 | |
Adobe Acrobat Reader | =16.0.0.257 | |
Adobe Acrobat Reader | =16.0.0.287 | |
Adobe Acrobat Reader | =16.0.0.296 | |
Adobe Acrobat Reader | =17.0.0.134 | |
Apple iOS and macOS | ||
Microsoft Windows | ||
openSUSE | =13.1 | |
openSUSE | =13.2 | |
SUSE Linux Enterprise Desktop | =11.0-sp3 | |
SUSE Linux Enterprise Desktop | =12.0 | |
SUSE Linux Workstation Extension | =12.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-3041 has been assigned a high-severity rating due to its potential to allow arbitrary code execution.
To fix CVE-2015-3041, you should update Adobe Flash Player to the latest version that is not affected by this vulnerability.
CVE-2015-3041 affects Adobe Flash Player versions 13.0.0.281 and earlier on Windows, OS X, and Linux.
Yes, CVE-2015-3041 can lead to a denial of service due to memory corruption.
Disabling or uninstalling Adobe Flash Player is a temporary workaround to mitigate CVE-2015-3041 while awaiting an update.