{"id":"CVE-2015-0304","aliases":["EUVD-2015-0317","GHSA-8952-r9mj-49v8","MGASA-2015-0024","RHSA-2015:0052","SUSE-SU-2015:0239-1","SUSE-SU-2015:0493-1","SUSE-SU-2015:0723-1","SUSE-SU-2015:0880-1","SUSE-SU-2015:1064-1","SUSE-SU-2015:1137-1","UBUNTU-CVE-2015-0304"],"status":"published","title":"Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before...","description":"Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK \u0026 Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.08742,"percentile":0.95186,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2014-11-14T12:52:02Z","modified":"2026-06-29T10:08:16Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","fixed_in":["11.2.202.429ubuntu0.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:4","package":"flash-player-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.429-1.mga4.nonfree"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.429-1.el5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.429-1.el5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"flash-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.2.202.429-1.el6"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"flashplugin-nonfree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.429ubuntu0.14.04.1"}]}],"versions":["11.2.202.310ubuntu1","11.2.202.327ubuntu0.13.10.1","11.2.202.332ubuntu1","11.2.202.335ubuntu1","11.2.202.336ubuntu1","11.2.202.341ubuntu1","11.2.202.346ubuntu1","11.2.202.350ubuntu1","11.2.202.356ubuntu0.14.04.1","11.2.202.359ubuntu0.14.04.1","11.2.202.378ubuntu0.14.04.1","11.2.202.394ubuntu0.14.04.1","11.2.202.400ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.1","11.2.202.406ubuntu0.14.04.2","11.2.202.411ubuntu0.14.04.1","11.2.202.418ubuntu0.14.04.1","11.2.202.424ubuntu0.14.04.1","11.2.202.425ubuntu0.14.04.1"]}],"products":[{"vendor":"adobe","product":"adobe_air"},{"vendor":"adobe","product":"adobe_air_sdk"},{"vendor":"adobe","product":"adobe_air_sdk_and_compiler"},{"vendor":"adobe","product":"flash_player"}],"references":[{"url":"http://secunia.com/advisories/62371","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://security.gentoo.org/glsa/glsa-201502-02.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://secunia.com/advisories/62740","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/62177","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1089","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred"]},{"url":"http://helpx.adobe.com/security/products/flash-player/apsb15-01.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","web","article","report"]},{"url":"http://secunia.com/advisories/62252","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securitytracker.com/id/1031525","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99985","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/62187","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/72032","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0304","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8952-r9mj-49v8"},{"url":"https://advisories.mageia.org/MGASA-2015-0024.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15035","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0052","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb15-01.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1181903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1181909","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0052.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0301","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0301","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0301","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0302","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0302","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0302","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0303","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0303","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0303","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0304","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0304","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0305","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0306","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0306","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0306","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0307","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0308","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0308","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0309","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0309","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150239-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/824512","tags":["report"]},{"url":"https://bugzilla.suse.com/828810","tags":["report"]},{"url":"https://bugzilla.suse.com/839897","tags":["report"]},{"url":"https://bugzilla.suse.com/850220","tags":["report"]},{"url":"https://bugzilla.suse.com/854881","tags":["report"]},{"url":"https://bugzilla.suse.com/856386","tags":["report"]},{"url":"https://bugzilla.suse.com/858822","tags":["report"]},{"url":"https://bugzilla.suse.com/862288","tags":["report"]},{"url":"https://bugzilla.suse.com/865021","tags":["report"]},{"url":"https://bugzilla.suse.com/867808","tags":["report"]},{"url":"https://bugzilla.suse.com/872692","tags":["report"]},{"url":"https://bugzilla.suse.com/875577","tags":["report"]},{"url":"https://bugzilla.suse.com/877649","tags":["report"]},{"url":"https://bugzilla.suse.com/882187","tags":["report"]},{"url":"https://bugzilla.suse.com/886472","tags":["report"]},{"url":"https://bugzilla.suse.com/891688","tags":["report"]},{"url":"https://bugzilla.suse.com/895856","tags":["report"]},{"url":"https://bugzilla.suse.com/901334","tags":["report"]},{"url":"https://bugzilla.suse.com/905032","tags":["report"]},{"url":"https://bugzilla.suse.com/907257","tags":["report"]},{"url":"https://bugzilla.suse.com/909219","tags":["report"]},{"url":"https://bugzilla.suse.com/913057","tags":["report"]},{"url":"https://bugzilla.suse.com/914333","tags":["report"]},{"url":"https://bugzilla.suse.com/914463","tags":["report"]},{"url":"https://bugzilla.suse.com/915918","tags":["report"]},{"url":"https://bugzilla.suse.com/922033","tags":["report"]},{"url":"https://bugzilla.suse.com/927089","tags":["report"]},{"url":"https://bugzilla.suse.com/930677","tags":["report"]},{"url":"https://bugzilla.suse.com/934088","tags":["report"]},{"url":"https://bugzilla.suse.com/935701","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0548","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3113","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150493-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150723-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150880-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151064-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151137-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-0304","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-0304","description":"Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK \u0026 Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.","status":"published","published":"2015-01-13T23:00:00Z","modified":"2024-08-06T04:03:10.953Z","updated_at":"2026-11-02T14:35:45.088047Z"}],"euvd":[{"id":"EUVD-2015-0317","description":"Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK \u0026 Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.","status":"published","published":"2015-01-13T23:00:00Z","modified":"2024-08-06T04:03:10Z","updated_at":"2026-11-03T02:22:20.481932Z"}],"ghsa":[{"id":"GHSA-8952-r9mj-49v8","title":"Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before...","description":"Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK \u0026 Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.","status":"published","published":"2022-05-17T01:11:38Z","modified":"2023-02-03T05:03:35Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:53:23.175393Z"}],"nvd":[{"id":"CVE-2015-0304","description":"Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK \u0026 Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.","status":"published","published":"2015-01-13T23:59:03.397Z","modified":"2026-06-17T00:19:57.07Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:01.643178Z"}],"osv":[{"id":"MGASA-2015-0024","title":"Updated flash-player-plugin packages fix security vulnerabilities","description":"Adobe Flash Player 11.2.202.429 contains fixes to critical security \nvulnerabilities found in earlier versions that could potentially allow an \nattacker to take control of the affected system.\n\nThis update resolves an improper file validation issue (CVE-2015-0301).  \n\nThis update resolves an information disclosure vulnerability that could be \nexploited to capture keystrokes on the affected system (CVE-2015-0302).  \n\nThis update resolves memory corruption vulnerabilities that could lead to \ncode execution (CVE-2015-0303, CVE-2015-0306).  \n\nThis update resolves heap-based buffer overflow vulnerabilities that could \nlead to code execution (CVE-2015-0304, CVE-2015-0309).  \n\nThis update resolves a type confusion vulnerability that could lead to code \nexecution (CVE-2015-0305). \n\nThis update resolves an out-of-bounds read vulnerability that could be \nexploited to leak memory addresses (CVE-2015-0307).  \n\nThis update resolves a use-after-free vulnerability that could lead to code \nexecution (CVE-2015-0308).\n","status":"published","published":"2015-01-14T21:55:48Z","modified":"2026-04-16T06:26:09.927682207Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"RHSA-2015:0052","title":"Red Hat Security Advisory: flash-plugin security update","status":"published","published":"2024-09-13T10:10:27Z","modified":"2026-06-29T10:08:16Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-SU-2015:0239-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2025-05-02T04:03:57.228408Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0493-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:08:38.331818Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0723-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:31:32.604879Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0880-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T02:39:45.191501Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1064-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:39:48.304838Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1137-1","title":"Security update for flash-player","description":"\nflash-player was updated to version 11.2.202.418 to fix 18 security issues:\n\n    * Memory corruption vulnerabilities that could lead to code execution\n      (CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).\n    * Use-after-free vulnerabilities that could lead to code execution\n      (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).\n    * A double free vulnerability that could lead to code execution\n      (CVE-2014-0574).\n    * Type confusion vulnerabilities that could lead to code execution\n      (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586,\n      CVE-2014-0590).\n    * Heap buffer overflow vulnerabilities that could lead to code\n      execution (CVE-2014-0582, CVE-2014-0589).\n    * An information disclosure vulnerability that could be exploited to\n      disclose session tokens (CVE-2014-8437).\n    * A heap buffer overflow vulnerability that could be exploited to\n      perform privilege escalation from low to medium integrity level\n      (CVE-2014-0583).\n    * A permission issue that could be exploited to perform privilege\n      escalation from low to medium integrity level (CVE-2014-8442).\n\nFurther information can be found at \nhttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\n\u003chttp://helpx.adobe.com/security/products/flash-player/apsb14-24.html\u003e .\n\nSecurity Issues:\n\n    * CVE-2014-0576\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576\u003e\n    * CVE-2014-0581\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581\u003e\n    * CVE-2014-8440\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440\u003e\n    * CVE-2014-8441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441\u003e\n    * CVE-2014-0573\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573\u003e\n    * CVE-2014-0588\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588\u003e\n    * CVE-2014-8438\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438\u003e\n    * CVE-2014-0574\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574\u003e\n    * CVE-2014-0577\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577\u003e\n    * CVE-2014-0584\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584\u003e\n    * CVE-2014-0585\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585\u003e\n    * CVE-2014-0586\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586\u003e\n    * CVE-2014-0590\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590\u003e\n    * CVE-2014-0582\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582\u003e\n    * CVE-2014-0589\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589\u003e\n    * CVE-2014-8437\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437\u003e\n    * CVE-2014-0583\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583\u003e\n    * CVE-2014-8442\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442\u003e\n\n","status":"published","published":"2014-11-14T12:52:02Z","modified":"2026-02-04T03:11:51.763015Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2015-0304","description":"Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK \u0026 Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.","status":"published","published":"2015-01-13T23:59:00Z","modified":"2025-07-16T07:32:27.443306Z","updated_at":"2026-11-02T15:54:09.721803Z"}]}}