ZeroDay Findings
Sign inSign up

Findings

CVE-2015-3043

Adobe Flash Player Memory Corruption Vulnerability

Published Apr 14, 2015 · updated Jun 16, 2026 · adobe flash player

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 14, 2015 · Catalog

    Detected

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-201

  2. Mar 3, 2022 · CISA KEV

    Known exploited

    The impacted product is end-of-life and should be disconnected if still in use.

  3. Mar 24, 2022 · CISA KEV

    Remediation due

    The impacted product is end-of-life and should be disconnected if still in use.

  4. Jun 16, 2026 · Catalog

    Updated

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-201

Required action

The impacted product is end-of-life and should be disconnected if still in use.

CISA due date Mar 24, 2022

Affected

  • cpe adobe/flash playerversion unspecified
  • cpe novell/suse linux enterprise desktop11.0
  • cpe novell/suse linux enterprise desktop12.0
  • cpe novell/suse linux enterprise workstation extension12.0
  • cpe opensuse/evergreen11.4
  • cpe opensuse/opensuse13.1
  • cpe redhat/enterprise linux desktop5.0
  • vendor Adobe Flash Playerversion unspecified

Sources

  • CISA KEVCVE-2015-3043

    A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.

    cisa.gov
  • CVE.orgCVE-2015-3043

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2015-3043

    30-day exploitation probability 73.9%

    first.org
  • Exploit Database37536

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit Modulesexploit_multi/browser/adobe_flash_nellymoser_bof

    Public module reference (great). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2015-3043

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April

    nvd.nist.gov

References