{"schemaVersion":3,"id":"MGASA-2015-0273","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated flash-player-plugin package fixes critical security vulnerabilities\n\nAdobe Flash Player 11.2.202.481 contains fixes to critical security\nvulnerabilities found in earlier versions that could potentially allow an\nattacker to take control of the affected system.\n\nAdobe is aware of a report that an exploit targeting CVE-2015-5119 has\nbeen publicly published.\n\nThis updates resolves heap buffer overflow vulnerabilities that could lead\nto code execution (CVE-2015-3135, CVE-2015-4432, CVE-2015-5118).\n\nThis updates resolves memory corruption vulnerabilities that could lead to\ncode execution (CVE-2015-3117, CVE-2015-3123, CVE-2015-3130,\nCVE-2015-3133, CVE-2015-3134, CVE-2015-4431).\n\nThis updates resolves null pointer dereference issues (CVE-2015-3126,\nCVE-2015-4429).\n\nThis updates resolves a security bypass vulnerability that could lead to\ninformation disclosure (CVE-2015-3114).\n\nThis updates resolves type confusion vulnerabilities that could lead to\ncode execution (CVE-2015-3119, CVE-2015-3120, CVE-2015-3121,\nCVE-2015-3122, CVE-2015-4433).\n\nThis updates resolves use-after-free vulnerabilities that could lead to\ncode execution (CVE-2015-3118, CVE-2015-3124, CVE-2015-5117,\nCVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132,\nCVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, CVE-2015-5119).\n\nThis updates resolves vulnerabilities that could be exploited to bypass\nthe same-origin-policy and lead to information disclosure (CVE-2014-0578,\nCVE-2015-3115, CVE-2015-3116, CVE-2015-3125, CVE-2015-5116).","dates":{"published":"2015-07-09T08:09:20.000Z","modified":"2026-04-16T06:23:28.159Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"flash-player-plugin","name":"flash-player-plugin","label":"flash-player-plugin","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/flash-player-plugin","purlType":"rpm","versions":[{"text":"< 11.2.202.481-1.mga4.nonfree","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.2.202.481-1.mga4.nonfree","eol":null,"hubHref":null},{"vendor":"mageia","product":"flash-player-plugin","name":"flash-player-plugin","label":"flash-player-plugin","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/flash-player-plugin","purlType":"rpm","versions":[{"text":"< 11.2.202.481-1.mga5.nonfree","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.2.202.481-1.mga5.nonfree","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2015-0273.html","label":"advisories.mageia.org/MGASA-2015-0273.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16325","label":"bugs.mageia.org/show_bug.cgi?id=16325","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb15-16.html","label":"helpx.adobe.com/security/products/flash-player/apsb15-16.html","hostname":"helpx.adobe.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2014-0578","CVE-2015-3114","CVE-2015-3115","CVE-2015-3116","CVE-2015-3117","CVE-2015-3118","CVE-2015-3119","CVE-2015-3120","CVE-2015-3121","CVE-2015-3122","CVE-2015-3123","CVE-2015-3124","CVE-2015-3125","CVE-2015-3126","CVE-2015-3127","CVE-2015-3128","CVE-2015-3129","CVE-2015-3130","CVE-2015-3131","CVE-2015-3132","CVE-2015-3133","CVE-2015-3134","CVE-2015-3135","CVE-2015-3136","CVE-2015-3137","CVE-2015-4428","CVE-2015-4429","CVE-2015-4430","CVE-2015-4431","CVE-2015-4432","CVE-2015-4433","CVE-2015-5116","CVE-2015-5117","CVE-2015-5118","CVE-2015-5119"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2015-07-09T08:09:20.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T06:23:28.159Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T11:17:33.934Z","stale":false,"partial":false}}