CVE-2015-5123
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation...
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.
- Record
CVE-2015-5123- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.
- Record
CVE-2015-5123- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
EUVDEUVD-2015-5138
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.
- Record
EUVD-2015-5138- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-6hpg-rw47-66vr
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation...
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.
- Record
GHSA-6hpg-rw47-66vr- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
CISA KEV No score
Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
- Record
CVE-2015-5123- Weakness
- CWE-416
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-5123
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.
- Record
UBUNTU-CVE-2015-5123- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2015-0275 No score
Updated flash-player-plugin package fixes security vulnerabilities
Adobe Flash Player 11.2.202.491 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system.
Adobe is aware of reports that exploits targeting these vulnerabilities have been published publicly.
This update resolves a use-after-free vulnerability that could lead to code execution (CVE-2015-5122).
This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2015-5123).
- Record
MGASA-2015-0275- Updated
- 2026-11-02
OSVSUSE-SU-2015:1255-1 No score
Security update for flash-player
flash-player was updated to fix two security issues.
These security issues were fixed:
- CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function (bsc#937752).
- CVE-2015-5122: Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property (bsc#937752).
- Record
SUSE-SU-2015:1255-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1258-1 No score
Security update for flash-player
flash-player was updated to fix two security issues.
These security issues were fixed:
- CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function (bsc#937752).
- CVE-2015-5122: Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property (bsc#937752).
- Record
SUSE-SU-2015:1258-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-player-pluginMageia:4 From an advisory covering 2 CVEs |
before 11.2.202.491-1.mga4.nonfree | 11.2.202.491-1.mga4.nonfree |
flash-player-pluginMageia:5 From an advisory covering 2 CVEs |
before 11.2.202.491-1.mga5.nonfree | 11.2.202.491-1.mga5.nonfree |
flash-pluginRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs |
before 0:11.2.202.491-1.el5 | 0:11.2.202.491-1.el5 |
flash-pluginRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs |
before 0:11.2.202.491-1.el5 | 0:11.2.202.491-1.el5 |
flash-pluginRed Hat:rhel_extras:6 From an advisory covering 2 CVEs |
before 0:11.2.202.491-1.el6_6 | 0:11.2.202.491-1.el6_6 |
flash-playerSUSE:Linux Enterprise Desktop 12 From an advisory covering 2 CVEs |
before 11.2.202.491-96.1 | 11.2.202.491-96.1 |
flash-playerSUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 2 CVEs |
before 11.2.202.491-96.1 | 11.2.202.491-96.1 |
flash-playerSUSE:Linux Enterprise Desktop 11 SP3 From an advisory covering 2 CVEs |
before 11.2.202.491-0.11.1 | 11.2.202.491-0.11.1 |
flash-playerSUSE:Linux Enterprise Desktop 11 SP4 From an advisory covering 2 CVEs |
before 11.2.202.491-0.11.1 | 11.2.202.491-0.11.1 |
flashplugin-nonfreeUbuntu:14.04:LTS |
before 11.2.202.481ubuntu0.14.04.2, plus listed versions 11.2.202.310ubuntu111.2.202.327ubuntu0.13.10.111.2.202.332ubuntu111.2.202.335ubuntu111.2.202.336ubuntu1 Show 24 moreShow less11.2.202.341ubuntu111.2.202.346ubuntu111.2.202.350ubuntu111.2.202.356ubuntu0.14.04.111.2.202.359ubuntu0.14.04.111.2.202.378ubuntu0.14.04.111.2.202.394ubuntu0.14.04.111.2.202.400ubuntu0.14.04.111.2.202.406ubuntu0.14.04.111.2.202.406ubuntu0.14.04.211.2.202.411ubuntu0.14.04.111.2.202.418ubuntu0.14.04.111.2.202.424ubuntu0.14.04.111.2.202.425ubuntu0.14.04.111.2.202.429ubuntu0.14.04.111.2.202.438ubuntu0.14.04.111.2.202.440ubuntu0.14.04.111.2.202.442ubuntu0.14.04.111.2.202.451ubuntu0.14.04.111.2.202.457ubuntu0.14.04.111.2.202.460ubuntu0.14.04.111.2.202.466ubuntu0.14.04.111.2.202.468ubuntu0.14.04.111.2.202.481ubuntu0.14.04.1 |
11.2.202.481ubuntu0.14.04.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| exploitation | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-5123 is a critical vulnerability (CVSS 9.8) in Adobe Flash Player, published July 14, 2015. CISA lists it as known to be exploited, since April 13, 2022. EUVD reports exploitation since April 13, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.8%, the 97th percentile. Fixed in flashplugin-nonfree 11.2.202.481ubuntu0.14.04.2.
References
securitytracker.com/id/1032890
lists.opensuse.org/opensuse-security-announce/2015-07/msg00028.html
blog.trendmicro.com/trendlabs-security-intelligence/new-zero-day-vulnerability-cve-2015-5123-in-adobe-flash-emerges-from-hacking-team-leak
marc.info?l=bugtraq&m=144050155601375&w=2
us-cert.gov/ncas/alerts/TA15-195A
helpx.adobe.com/security/products/flash-player/apsb15-18.html
Show 30 moreShow less
kb.cert.org/vuls/id/918568
security.gentoo.org/glsa/201508-01
h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04796784
rhn.redhat.com/errata/RHSA-2015-1235.html
securityfocus.com/bid/75710
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5123
github.com/cisagov/vulnrichment/issues/196
nvd.nist.gov/vuln/detail/CVE-2015-5123
advisories.mageia.org/MGASA-2015-0275.html
bugs.mageia.org/show_bug.cgi?id=16392
access.redhat.com/errata/RHSA-2015:1235
bugzilla.redhat.com/show_bug.cgi?id=1242216
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1235.json
cve.org/CVERecord?id=CVE-2015-5122
suse.com/support/update/announcement/2015/suse-su-20151255-1
bugzilla.suse.com/937752
ubuntu.com/security/CVE-2015-5123