CVE-2015-3104: Integer Overflow

Published Jun 10, 2015
·
Updated

Integer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.

Affected Software

27 affected components
Adobe AIR<=17.0.0.144
Google Android
Adobe AIR<=17.0.0.172
Adobe AIR SDK<=17.0.0.172
Adobe Air Sdk \& Compiler<=17.0.0.172
Apple iOS and macOS
Microsoft Windows
Adobe Flash Player<=11.2.202.460
Linux Linux kernel
Adobe Flash Player<=13.0.0.289
Adobe Flash Player=14.0.0.125
Adobe Flash Player=14.0.0.145
Adobe Flash Player=14.0.0.176
Adobe Flash Player=14.0.0.179
Adobe Flash Player=15.0.0.152
Adobe Flash Player=15.0.0.167
Adobe Flash Player=15.0.0.189
Adobe Flash Player=15.0.0.223
Adobe Flash Player=15.0.0.239
Adobe Flash Player=15.0.0.246
Adobe Flash Player=16.0.0.235
Adobe Flash Player=16.0.0.257
Adobe Flash Player=16.0.0.287
Adobe Flash Player=16.0.0.296
Adobe Flash Player=17.0.0.134
Adobe Flash Player=17.0.0.169
Adobe Flash Player=17.0.0.188

Event History

Jun 10, 2015
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2015-3104?

CVE-2015-3104 has a severity rating that indicates it poses significant risk due to integer overflow vulnerabilities in Adobe Flash Player and Adobe AIR.

2

How do I fix CVE-2015-3104?

To fix CVE-2015-3104, you should update Adobe Flash Player and Adobe AIR to the latest versions provided by Adobe.

3

What systems are affected by CVE-2015-3104?

CVE-2015-3104 affects multiple versions of Adobe Flash Player on Windows, macOS, and Linux, as well as Adobe AIR on multiple platforms.

4

Is CVE-2015-3104 still a risk today?

CVE-2015-3104 is less of a risk today as long as affected software has been updated, but systems using outdated versions remain vulnerable.

5

What types of vulnerabilities are associated with CVE-2015-3104?

CVE-2015-3104 is associated with integer overflow vulnerabilities that can lead to memory corruption and potential remote code execution.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203