First published: Thu Jul 09 2015(Updated: )
Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3134, and CVE-2015-4431.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Flash Player for Internet Explorer 11 | <=11.2.202.468 | |
Linux Kernel | ||
Adobe Flash Player for Internet Explorer 11 | <=13.0.0.289 | |
Adobe Flash Player for Internet Explorer 11 | =14.0.0.125 | |
Adobe Flash Player for Internet Explorer 11 | =14.0.0.145 | |
Adobe Flash Player for Internet Explorer 11 | =14.0.0.176 | |
Adobe Flash Player for Internet Explorer 11 | =14.0.0.179 | |
Adobe Flash Player for Internet Explorer 11 | =15.0.0.152 | |
Adobe Flash Player for Internet Explorer 11 | =15.0.0.167 | |
Adobe Flash Player for Internet Explorer 11 | =15.0.0.189 | |
Adobe Flash Player for Internet Explorer 11 | =15.0.0.223 | |
Adobe Flash Player for Internet Explorer 11 | =15.0.0.239 | |
Adobe Flash Player for Internet Explorer 11 | =15.0.0.246 | |
Adobe Flash Player for Internet Explorer 11 | =16.0.0.235 | |
Adobe Flash Player for Internet Explorer 11 | =16.0.0.257 | |
Adobe Flash Player for Internet Explorer 11 | =16.0.0.287 | |
Adobe Flash Player for Internet Explorer 11 | =16.0.0.296 | |
Adobe Flash Player for Internet Explorer 11 | =17.0.0.134 | |
Adobe Flash Player for Internet Explorer 11 | =17.0.0.169 | |
Adobe Flash Player for Internet Explorer 11 | =17.0.0.188 | |
Adobe Flash Player for Internet Explorer 11 | =17.0.0.190 | |
Adobe Flash Player for Internet Explorer 11 | =18.0.0.160 | |
Adobe Flash Player for Internet Explorer 11 | =18.0.0.194 | |
macOS Yosemite | ||
Microsoft Windows | ||
Adobe AIR | <=18.0.0.144 | |
Adobe AIR SDK and Compiler | <=18.0.0.144 | |
Adobe AIR SDK & Compiler | <=18.0.0.144 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-3133 is classified as a critical vulnerability allowing arbitrary code execution and denial of service.
To fix CVE-2015-3133, users must upgrade affected versions of Adobe Flash Player to version 18.0.0.203 or later.
CVE-2015-3133 affects Adobe Flash Player versions 11.2.202.468 and below, as well as versions from 14.x through 18.x up to 18.0.0.202.
CVE-2015-3133 impacts Adobe Flash Player on Windows, OS X, and Linux platforms.
If immediate upgrades are not possible, users should consider disabling the Adobe Flash Player until the issue can be resolved.