CVE-2015-3044: adobe flash_player

CVSS: 5.0v2.0MediumModified

AliasesUBUNTU-CVE-2015-3044

Published 14-04-2015Last modified 06-08-2024

Vulnerability summary

CVE-2015-3044 is a medium (CVSS 5.0) vulnerability in adobe flash_player. EPSS estimates a 9.40% chance of exploitation in the next 30 days, higher than 95.3% of scored vulnerabilities.

Overall risk

22/100

0100

Low · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

9.40%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5 · Related 2

MGASA-2015-0155 MGASA-2015-0218 RHSA-2015:0813 SUSE-SU-2015:0722-1 SUSE-SU-2015:0878-1

Timeline

14-04-2015
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

9.40%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 9.40% on 18-09-2026

18-09-202618-10-2026

EPSS score

9.40%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Affected systems

Redhat5 products

enterprise_linux_desktop_supplementary5.0:client | 6.0
enterprise_linux_server_supplementary6.0
enterprise_linux_server_supplementary_eus6.6.z
enterprise_linux_supplementary5.0:server
enterprise_linux_workstation_supplementary6.0

Novell2 products

suse_linux_enterprise_desktop11.0:sp3 | 12.0
suse_linux_enterprise_workstation_extension12.0

Adobe1 product

flash_player≤ 13.0.0.264 | 14.0.0.125 | 14.0.0.145 | 14.0.0.176 | 14.0.0.179 | 15.0.0.152 | 15.0.0.167 | 15.0.0.189 | 15.0.0.223 | 15.0.0.239 | 15.0.0.246 | 16.0.0.235 | 16.0.0.257 | 16.0.0.287 | 16.0.0.296 | 17.0.0.134 | ≤ 11.2.202.451

Opensuse1 product

opensuseEOL13.1 | 13.2

Ubuntu1 product

flashplugin-nonfree< 11.2.202.457ubuntu0.14.04.1

5 vendors · 10 products

References

15 links

lists.opensuse.org/opensuse-security-announce/2015-05/msg00007.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-security-announce/2015-05/msg00010.htmlVendor AdvisoryX Refsource SUSE
www.securityfocus.com/bid/74065VDB EntryX Refsource BID
lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
security.gentoo.org/glsa/201505-02Vendor AdvisoryX Refsource GENTOO
security.gentoo.org/glsa/201504-07Vendor AdvisoryX Refsource GENTOO
www.securitytracker.com/id/1032105VDB EntryX Refsource SECTRACK
rhn.redhat.com/errata/RHSA-2015-0813.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-05/msg00016.htmlVendor AdvisoryX Refsource SUSE

Show all 15 references

helpx.adobe.com/security/products/flash-player/apsb15-06.htmlX Refsource CONFIRMPatchVendor AdvisoryREPORT
lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
ubuntu.com/security/CVE-2015-3044REPORT
www.cve.org/CVERecord?id=CVE-2015-3044REPORT

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities