critical
CVE-2015-3043
flash-plugin: multiple code execution issues fixed in APSB15-06
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
Trivy's own label is CRITICAL. Rated critical by NVD, Red Hat. Rated lower by Ubuntu (medium).
Description
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin, flashplugin-nonfree | 1:20150414.1-0precise1 and 1 more |
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 1:20150414.1-0trusty1 and 1 more |
| ubuntu 14.10 | adobe-flashplugin, flashplugin-nonfree | 1:20150414.1-0utopic1 and 1 more |
Show all 6 entries from 3 sources
| Source | Package | Fixed in |
|---|---|---|
| ubuntu 12.04 | adobe-flashplugin | 1:20150414.1-0precise1 |
| ubuntu 12.04 | flashplugin-nonfree | 11.2.202.457ubuntu0.12.04.1 |
| ubuntu 14.04 | adobe-flashplugin | 1:20150414.1-0trusty1 |
| ubuntu 14.04 | flashplugin-nonfree | 11.2.202.457ubuntu0.14.04.1 |
| ubuntu 14.10 | adobe-flashplugin | 1:20150414.1-0utopic1 |
| ubuntu 14.10 | flashplugin-nonfree | 11.2.202.457ubuntu0.14.10.1 |
References
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html
- http://rhn.redhat.com/errata/RHSA-2015-0813.html
- http://www.securityfocus.com/bid/74062
- http://www.securitytracker.com/id/1032105
- https://access.redhat.com/security/cve/CVE-2015-3043
All 16 references
- https://github.com/cisagov/vulnrichment/issues/196
- https://helpx.adobe.com/security/products/flash-player/apsb15-06.html
- https://nvd.nist.gov/vuln/detail/CVE-2015-3043
- https://security.gentoo.org/glsa/201504-07
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3043
- https://www.cve.org/CVERecord?id=CVE-2015-3043
- https://www.exploit-db.com/exploits/37536/