CVE-2015-3088: Buffer Overflow
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3088?
The severity of CVE-2015-3088 is classified as critical due to the potential for remote code execution.
How do I fix CVE-2015-3088?
To fix CVE-2015-3088, update Adobe Flash Player to the latest version that is not vulnerable.
What software is affected by CVE-2015-3088?
CVE-2015-3088 affects multiple versions of Adobe Flash Player, Adobe AIR, and Adobe AIR SDK prior to specified versions.
What kinds of attacks can exploit CVE-2015-3088?
CVE-2015-3088 can be exploited through malicious Flash content leading to arbitrary code execution.
Is there a workaround for CVE-2015-3088?
Disabling or removing Adobe Flash Player can serve as a temporary workaround for CVE-2015-3088 until updates are applied.