CVE-2015-3113 is a critical vulnerability that affects Adobe Flash Player on Windows, OS X, and Linux systems. It is a heap-based buffer overflow issue that allows remote attackers to execute arbitrary code on affected systems. It is essential for users to update their Adobe Flash Player to the latest version to protect their systems from potential attacks.

How do I know if I'm affected?

To determine if you're affected by the vulnerability, you should check if you're using Adobe Flash Player versions up to 13.0.0.292, 14.x through 18.x up to 18.0.0.161 on Windows and OS X, or up to 11.2.202.466 on Linux. This vulnerability affects users running various versions of SUSE Linux Enterprise, openSUSE Evergreen, HP Matrix Operating Environment, and Red Hat Enterprise Linux. If you're using any of these systems with the mentioned Adobe Flash Player versions, you may be at risk.

What should I do if I'm affected?

If you're affected by the vulnerability, update your Adobe Flash Player immediately. For Windows and OS X users, update to version 18.0.0.194 or later. For Linux users, update to version 11.2.202.468 or later. Follow your operating system's standard update process to install the latest version of Adobe Flash Player and protect your system.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

Yes, it is in CISA's Known Exploited Vulnerabilities Catalog. The vulnerability, named Adobe Flash Player Heap-Based Buffer Overflow Vulnerability, was added on April 13, 2022, with a due date of May 4, 2022. The required action is to disconnect the impacted product, which is end-of-life, if it's still in use.

Weakness enumeration

The weakness enumeration for CVE-2015-3113 is CWE-119, which refers to improper restriction of operations within a memory buffer, causing a heap-based buffer overflow in Adobe Flash Player, allowing remote code execution.

For more details

CVE-2015-3113 is a significant vulnerability affecting Adobe Flash Player on various platforms, including SUSE Linux Enterprise, openSUSE Evergreen, HP Matrix Operating Environment, and Red Hat Enterprise Linux. Security updates have been provided to address this heap-based buffer overflow issue, which could allow remote code execution. For a comprehensive understanding of the vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• Security update for flash-player in openSUSE

• Security update for Adobe Flash Player on openSUSE (1)

• HP Matrix Operating Environment, Multiple Vulnerabilities

• RHSA-2015:1184 - Security Advisory - Red Hat Customer Portal