NVD

Id
26383  
Name
CVE-2015-5122  
Description
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-07-14  
Modified Date
2016-12-27  
Seq
2015-5122  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
139420 26383 CVE-2015-5122 SUSE-SU-2015:1255  View
139421 26383 CVE-2015-5122 SUSE-SU-2015:1258  View
139422 26383 CVE-2015-5122 openSUSE-SU-2015:1267  View
139423 26383 CVE-2015-5122 HPSBMU03409  View
139424 26383 CVE-2015-5122 http://packetstormsecurity.com/files/132663/Adobe-Flash-opaqueBackground-Use-After-Free.html  View
139425 26383 CVE-2015-5122 RHSA-2015:1235  View
139426 26383 CVE-2015-5122 VU#338736  View
139427 26383 CVE-2015-5122 http://www.rapid7.com/db/modules/exploit/multi/browser/adobe_flash_opaque_background_uaf  View
139428 26383 CVE-2015-5122 75712  View
139429 26383 CVE-2015-5122 1032890  View
139430 26383 CVE-2015-5122 TA15-195A  View
139431 26383 CVE-2015-5122 SSRT102253  View
139432 26383 CVE-2015-5122 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952467  View
139433 26383 CVE-2015-5122 https://helpx.adobe.com/security/products/flash-player/apsa15-04.html  View
139434 26383 CVE-2015-5122 https://helpx.adobe.com/security/products/flash-player/apsb15-18.html  View
139435 26383 CVE-2015-5122 GLSA-201508-01  View
139436 26383 CVE-2015-5122 37599  View
139437 26383 CVE-2015-5122 https://www.fireeye.com/blog/threat-research/2015/07/cve-2015-5122_-_seco.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8213 JVNDB-2015-003533 Adobe Flash Player (opaqueBackground) に解放済みメモリ使用 (use-after-free) の脆弱性 Adobe Flash Player には、解放済みメモリ使用 (use-after-free) の脆弱性が存在します。 CVE-2015-5122 82347 CVE-2015-5122 26383 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003533.html 2015-07-11 2015-09-03 View