CVE-2015-3113
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
Published Jun 23, 2015 · updated Jun 16, 2026 · adobe flash player
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.
Timeline
Detection, updates, and resolution for this record.
Jun 23, 2015 · Catalog
Detected
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.
Apr 13, 2022 · CISA KEV
Known exploited
The impacted product is end-of-life and should be disconnected if still in use.
May 4, 2022 · CISA KEV
Remediation due
The impacted product is end-of-life and should be disconnected if still in use.
Jun 16, 2026 · Catalog
Updated
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.
Required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA due date May 4, 2022
Affected
- cpe adobe/flash playerversion unspecified
- cpe hp/insight orchestrationversion unspecified
- cpe opensuse/evergreen11.4
- cpe opensuse/opensuse13.1
- cpe opensuse/opensuse13.2
- cpe redhat/enterprise linux desktop6.0
- cpe suse/linux enterprise desktop12
- cpe suse/linux enterprise workstation extension12
- vendor Adobe Flash Playerversion unspecified
Sources
- CISA KEVCVE-2015-3113
Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.
cisa.gov - CVE.orgCVE-2015-3113
Official CVE identifier
cve.org - FIRST EPSSCVE-2015-3113
30-day exploitation probability 99.8%
first.org - Exploit Database37536
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_multi/browser/adobe_flash_nellymoser_bof
Public module reference (great). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2015-3113
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.
nvd.nist.gov