Exploited
critical
10
CWE
119 787
Advisory Published
CVE Published
Updated

CVE-2015-3113: Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

First published: Tue Jun 23 2015(Updated: )

Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.

Credit: psirt@adobe.com psirt@adobe.com

Affected SoftwareAffected VersionHow to fix
redhat/flash-plugin<11.2.202.468
11.2.202.468
Macromedia Flash Player<=13.0.0.292
Macromedia Flash Player=14.0.0.125
Macromedia Flash Player=14.0.0.145
Macromedia Flash Player=14.0.0.176
Macromedia Flash Player=14.0.0.179
Macromedia Flash Player=15.0.0.152
Macromedia Flash Player=15.0.0.167
Macromedia Flash Player=15.0.0.189
Macromedia Flash Player=15.0.0.223
Macromedia Flash Player=15.0.0.239
Macromedia Flash Player=15.0.0.246
Macromedia Flash Player=16.0.0.235
Macromedia Flash Player=16.0.0.257
Macromedia Flash Player=16.0.0.287
Macromedia Flash Player=16.0.0.296
Macromedia Flash Player=17.0.0.134
Macromedia Flash Player=17.0.0.169
Macromedia Flash Player=17.0.0.188
Macromedia Flash Player=18.0.0.161
Apple iOS and macOS
Microsoft Windows
Macromedia Flash Player<=11.2.202.466
Linux kernel
Macromedia Flash Player
All of
Any of
Macromedia Flash Player<13.0.0.296
Macromedia Flash Player>=14.0.0.125<18.0.0.194
Any of
Apple iOS and macOS
Microsoft Windows
All of
Macromedia Flash Player<11.2.202.468
Linux kernel
Evergreen ILS=11.4
openSUSE libeconf=13.1
openSUSE libeconf=13.2
SUSE Linux Enterprise Desktop=12
SUSE Linux Workstation Extension=12
HP Insight Orchestration<7.5.0
HP System Management Homepage<7.5.0
HP Systems Insight Manager<7.5
HP Version Control Agent<7.5.0
HP Version Control Repository Manager<7.5.0
HP Version Control Repository Manager=7.6
HP Virtual Connect Enterprise Manager<7.5.0
Red Hat Enterprise Linux Desktop=6.0
Red Hat Enterprise Linux Server EUS=6.6
Red Hat Enterprise Linux Server=6.0
Red Hat Enterprise Linux Workstation=6.0

Remedy

The impacted product is end-of-life and should be disconnected if still in use.

Remedy

https://helpx.adobe.com/security/products/flash-player/apsb15-14.html

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2015-3113?

    CVE-2015-3113 is rated as critical due to its potential for remote code execution through a heap-based buffer overflow in Adobe Flash Player.

  • How do I fix CVE-2015-3113?

    To fix CVE-2015-3113, update Adobe Flash Player to version 18.0.0.194 or later.

  • Which versions of Adobe Flash Player are vulnerable to CVE-2015-3113?

    Adobe Flash Player versions prior to 18.0.0.194, including 13.0.0.296 and 14.x through 18.x before 18.0.0.194 are vulnerable.

  • Can CVE-2015-3113 affect Linux systems?

    Yes, CVE-2015-3113 affects Adobe Flash Player on Linux systems running versions prior to 11.2.202.468.

  • What types of attacks can CVE-2015-3113 facilitate?

    CVE-2015-3113 can enable remote attackers to execute arbitrary code on affected systems.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203