CVE-2015-5119

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-03-03

Reference

https://nvd.nist.gov/vuln/detail/CVE-2015-5119

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.

Players implicated

Adobe · vendor Flash Player · product

Description

A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.

Affected FedRAMP products 8 in the catalog

Product	Provider	Status	Match
Adobe Acrobat Sign for Government	Adobe	Authorized	vendor-exact · 0.90
Adobe Analytics	Adobe	Authorized	vendor-exact · 0.90
Adobe Campaign	Adobe	Authorized	vendor-exact · 0.90
Adobe Connect Managed Services (ACMS-GC)	Adobe	Authorized	vendor-exact · 0.90
Adobe Creative Cloud for Enterprise	Adobe	Authorized	vendor-exact · 0.90
Adobe Document Cloud (PDF Services & Adobe Sign)	Adobe	Authorized	vendor-exact · 0.90
Adobe Experience Manager Managed Services (AEMMS-GC)	Adobe	Authorized	vendor-exact · 0.90
Adobe Learning Manager	Adobe	Authorized	vendor-exact · 0.90