CVE-2015-5128
Updated flash-player-plugin package fixes security vulnerabilities
CVE-2015-5128 has been rejected by its source and should not be treated as a live vulnerability, published August 11, 2015. Fixed in flashplugin-nonfree 11.2.202.508ubuntu0.14.04.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
11.2.202.508ubuntu0.14.04.1flashplugin-nonfree +6 more
Description
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-player-pluginMageia:4 From an advisory covering 33 CVEs | before 11.2.202.508-1.mga4.nonfree | 11.2.202.508-1.mga4.nonfree |
flash-player-pluginMageia:5 From an advisory covering 33 CVEs | before 11.2.202.508-1.mga5.nonfree | 11.2.202.508-1.mga5.nonfree |
flash-playerSUSE:Linux Enterprise Desktop 11 SP3 From an advisory covering 34 CVEs | before 11.2.202.508-0.14.1 | 11.2.202.508-0.14.1 |
flash-playerSUSE:Linux Enterprise Desktop 11 SP4 From an advisory covering 34 CVEs | before 11.2.202.508-0.14.1 | 11.2.202.508-0.14.1 |
flash-playerSUSE:Linux Enterprise Desktop 12 From an advisory covering 34 CVEs | before 11.2.202.508-99.1 | 11.2.202.508-99.1 |
flash-playerSUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 34 CVEs | before 11.2.202.508-99.1 | 11.2.202.508-99.1 |
flashplugin-nonfreeUbuntu:14.04:LTS | before 11.2.202.508ubuntu0.14.04.1, plus listed versions 11.2.202.310ubuntu111.2.202.327ubuntu0.13.10.111.2.202.332ubuntu111.2.202.335ubuntu111.2.202.336ubuntu1 Show 26 moreShow less11.2.202.341ubuntu111.2.202.346ubuntu111.2.202.350ubuntu111.2.202.356ubuntu0.14.04.111.2.202.359ubuntu0.14.04.111.2.202.378ubuntu0.14.04.111.2.202.394ubuntu0.14.04.111.2.202.400ubuntu0.14.04.111.2.202.406ubuntu0.14.04.111.2.202.406ubuntu0.14.04.211.2.202.411ubuntu0.14.04.111.2.202.418ubuntu0.14.04.111.2.202.424ubuntu0.14.04.111.2.202.425ubuntu0.14.04.111.2.202.429ubuntu0.14.04.111.2.202.438ubuntu0.14.04.111.2.202.440ubuntu0.14.04.111.2.202.442ubuntu0.14.04.111.2.202.451ubuntu0.14.04.111.2.202.457ubuntu0.14.04.111.2.202.460ubuntu0.14.04.111.2.202.466ubuntu0.14.04.111.2.202.468ubuntu0.14.04.111.2.202.481ubuntu0.14.04.111.2.202.481ubuntu0.14.04.211.2.202.491ubuntu0.14.04.1 | 11.2.202.508ubuntu0.14.04.1 |
What each source reports
CVE ListNo score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
CVE-2015-5128- Updated
- 2026-11-02
EUVDEUVD-2015-5143No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
EUVD-2015-5143- Updated
- 2026-11-03
NVDNo score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
CVE-2015-5128- Updated
- 2026-11-02
OSVMGASA-2015-0311No score
Updated flash-player-plugin package fixes security vulnerabilities
Adobe Flash Player 11.2.202.508 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system.
This update resolves type confusion vulnerabilities that could lead to code execution (CVE-2015-5128, CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562).
This update includes further hardening to a mitigation against vector length corruptions (CVE-2015-5125).
This update resolves use-after-free vulnerabilities that could lead to code execution (CVE-2015-5550, CVE-2015-5551, CVE-2015-3107, CVE-2015-5556, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5557, CVE-2015-5559, CVE-2015-5127, CVE-2015-5563, CVE-2015-5561, CVE-2015-5124).
This update resolves heap buffer overflow vulnerabilities that could lead to code execution (CVE-2015-5129, CVE-2015-5541).
This update resolves buffer overflow vulnerabilities that could lead to code execution (CVE-2015-5131, CVE-2015-5132, CVE-2015-5133).
This update resolves memory corruption vulnerabilities that could lead to code execution (CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, CVE-2015-5553).
This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2015-5560).
- Record
MGASA-2015-0311- Updated
- 2026-11-02
OSVSUSE-SU-2015:1373-1No score
Security update for flash-player
This security update to 11.2.202.508 (bsc#941239) fixes the following issues:
- APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5550, CVE-2015-5551, CVE-2015-5552, CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556, CVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561, CVE-2015-5562, CVE-2015-5563
- Record
SUSE-SU-2015:1373-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1374-1No score
Security update for flash-player
This security update to 11.2.202.508 (bsc#941239) fixes the following issues:
- APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5550, CVE-2015-5551, CVE-2015-5552, CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556, CVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561, CVE-2015-5562, CVE-2015-5563
- Record
SUSE-SU-2015:1374-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-5128No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
- Record
UBUNTU-CVE-2015-5128- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
advisories.mageia.org/MGASA-2015-0311.html
bugs.mageia.org/show_bug.cgi?id=16573
helpx.adobe.com/security/products/flash-player/apsb15-19.html
suse.com/support/update/announcement/2015/suse-su-20151373-1
bugzilla.suse.com/941239
suse.com/security/cve/CVE-2015-3107
Show 36 moreShow less
suse.com/security/cve/CVE-2015-5124
suse.com/security/cve/CVE-2015-5125
suse.com/security/cve/CVE-2015-5127
suse.com/security/cve/CVE-2015-5128
suse.com/security/cve/CVE-2015-5129
suse.com/security/cve/CVE-2015-5130
suse.com/security/cve/CVE-2015-5131
suse.com/security/cve/CVE-2015-5132
suse.com/security/cve/CVE-2015-5133
suse.com/security/cve/CVE-2015-5134
suse.com/security/cve/CVE-2015-5539
suse.com/security/cve/CVE-2015-5540
suse.com/security/cve/CVE-2015-5541
suse.com/security/cve/CVE-2015-5544
suse.com/security/cve/CVE-2015-5545
suse.com/security/cve/CVE-2015-5546
suse.com/security/cve/CVE-2015-5547
suse.com/security/cve/CVE-2015-5548
suse.com/security/cve/CVE-2015-5549
suse.com/security/cve/CVE-2015-5550
suse.com/security/cve/CVE-2015-5551
suse.com/security/cve/CVE-2015-5552
suse.com/security/cve/CVE-2015-5553
suse.com/security/cve/CVE-2015-5554
suse.com/security/cve/CVE-2015-5555
suse.com/security/cve/CVE-2015-5556
suse.com/security/cve/CVE-2015-5557
suse.com/security/cve/CVE-2015-5558
suse.com/security/cve/CVE-2015-5559
suse.com/security/cve/CVE-2015-5560
suse.com/security/cve/CVE-2015-5561
suse.com/security/cve/CVE-2015-5562
suse.com/security/cve/CVE-2015-5563
suse.com/support/update/announcement/2015/suse-su-20151374-1
ubuntu.com/security/CVE-2015-5128
cve.org/CVERecord?id=CVE-2015-5128