CVE-2015-0304
- State
- Published
- Severity
- Not scored
- Published
- Jan 13, 2015
- Updated
- Aug 6, 2024
- Reserved
- Dec 1, 2014
Description
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 62371third-party-advisory
- GLSA-201502-02vendor-advisory
- 62740third-party-advisory
- 62177third-party-advisory
- 20141016 Adobe Flash Player Sound Object "loadCompressedDataFromByteArray" Heap Overflow Vulnerabilitythird-party-advisory
- http://helpx.adobe.com/security/products/flash-player/apsb15-01.html
- 62252third-party-advisory
- 1031525vdb-entry
- adobe-cve20150304-bo(99985)vdb-entry
- 62187third-party-advisory
- 72032vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.