{"id":"CVE-2015-3090","published":"2015-05-13T10:00:00Z","modified":"2024-08-06T05:32:21Z","title":"Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3078, CVE-2015-3089, and CVE-2015-3093.","provenance":"source","from":"CVE.org"},"summary":{"text":"Adobe Flash Player (before 13.0.0.289, 14.x through 17.x before 17.0.0.188 on Windows and OS X, and before 11.2.202.460 on Linux), along with Adobe AIR and the Adobe AIR SDK and SDK & Compiler (before 17.0.0.172), contains a memory corruption flaw in its handling of content. An attacker can exploit it through unspecified vectors to execute arbitrary code or cause a denial of service.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:08Z"},"cvss":null,"epss":{"score":0.8318,"percentile":0.99675,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2015-07-30","exploitedFirstSeen":"2015-07-30","ransomware":false,"evidence":[{"url":"https://securelist.com/it-threat-evolution-q2-2015/71610/","date":"2015-07-30"},{"url":"https://www.recordedfuture.com/blog/top-vulnerabilities-2015","date":"2015-11-09"},{"url":"https://securelist.com/kaspersky-security-bulletin-2015-overall-statistics-for-2015/73038/","date":"2015-12-15"}],"evidenceTotal":3,"provenance":"source"},"exploited":true,"otx":{"pulseCount":4,"pulses":[{"name":"Thor Lite Scanner - Cigabuntu (Parrot Version) vs. The Book of Shadows","url":"https://otx.alienvault.com/pulse/666ac558d08da6cfb3ba135b","created":"2024-06-13"},{"name":"Thor-Lite Linux 64 (06.11.24) - enriched a bit more but not 'pruned'","url":"https://otx.alienvault.com/pulse/6668b85065eec626e4766a38","created":"2024-06-11"},{"name":"Operation Rocket Man","url":"https://otx.alienvault.com/pulse/5b7d68bbac58cc6255d3d42c","created":"2018-08-22"},{"name":"Angler EK Exploiting Adobe Flash CVE-2015-3090","url":"https://otx.alienvault.com/pulse/55653b1ab45ff54c8ee5b42c","created":"2015-05-27"}],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.securitytracker.com/id/1032285","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00007.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00010.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb15-09.html","tags":["x_refsource_CONFIRM"]},{"url":"https://security.gentoo.org/glsa/201505-02","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1005.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securityfocus.com/bid/74605","tags":["vdb-entry","x_refsource_BID"]}],"techniques":[{"id":"T1189","name":"Drive-by Compromise","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Flash content delivered via browser exploitation","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"allow attackers to execute arbitrary code or cause a denial of service","start":240,"end":310}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1203","name":"Exploitation for Client Execution","tactics":["execution"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Exploits client-side Flash Player code execution","mappingType":"primary_impact","evidence":[{"from":"description","quote":"allow attackers to execute arbitrary code or cause a denial of service","start":240,"end":310}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1499.004","name":"Application or System Exploitation","tactics":["impact"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Memory corruption can crash the application","mappingType":"primary_impact","evidence":[{"from":"description","quote":"cause a denial of service (memory corruption)","start":285,"end":330}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[{"id":"SRC-619721166ae9d9d7fdcd","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/4/4/C/44CDEF0E-7924-4787-A56A-16261691ACE3/Microsoft_Security_Intelligence_Report_Volume_19_English.pdf","date":null,"mentions":[{"quote":"Flash Player APSB15-02 Angler (JS/Axpergle)\r\nCVE-2015-0311 Adobe Flash Player APSB15-03 Angler\r\nCVE-2015-0313 Adobe Flash Player APSB15-04 Angler\r\nCVE-2015-0336 Adobe Flash Player APSB15-05 Nuclear (JS/Neclu); Angler\r\nCVE-2015-0359 Adobe Flash Player APSB15-06 Angler\r\nCVE-2015-3090 Adobe Flash Player APSB15-09","start":81671,"end":81982},{"quote":"57\r\nCVE-2015-0310, 47\r\nCVE-2015-0311, 46, 47, 53\r\nCVE-2015-0313, 46, 47, 53\r\nCVE-2015-0336, 47, 53\r\nCVE-2015-0359, 47, 53\r\nCVE-2015-1641, 16, 57\r\nCVE-2015-1701, 14, 18, 19, 57\r\nCVE-2015-1769, 57\r\nCVE-2015-1770, 57\r\nCVE-2015-2360, 57\r\nCVE-2015-2424, 16, 17\r\nCVE-2015-3043, 17, 18, 57\r\nCVE-2015-3090,","start":238393,"end":238691}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2015-3171","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3171","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":37368,"url":"https://www.exploit-db.com/exploits/37368","title":"Adobe Flash Player - ShaderJob Buffer Overflow (Metasploit)","type":"remote","platform":"multiple","date":"2015-06-24","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2015-06-24"},"pocGithub":{"count":1,"skipped":0,"earliest":"2021-09-19","earliestUrl":"https://github.com/Xattam1/Adobe-Flash-Exploits_17-18","repos":[{"name":"Xattam1/Adobe-Flash-Exploits_17-18","url":"https://github.com/Xattam1/Adobe-Flash-Exploits_17-18","stars":1,"created":"2021-09-19"}]},"metasploit":[{"name":"Adobe Flash Player ShaderJob Buffer Overflow","module":"exploit/multi/browser/adobe_flash_shader_job_overflow","type":"exploit","disclosureDate":"2015-05-12","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/adobe_flash_shader_job_overflow.rb"}],"first":{"date":"2015-05-12","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/adobe_flash_shader_job_overflow.rb"},"provenance":"source"},"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1189"],"provenance":"ai"},{"stage":"primary","techniques":["T1203","T1499.004"],"provenance":"ai"}],"timeline":[{"date":"2015-05-12","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2015-06-24, PoC-in-GitHub 2021-09-19","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/adobe_flash_shader_job_overflow.rb","provenance":"source"},{"date":"2015-05-13","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2015-3090","provenance":"source"},{"date":"2015-07-30","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://securelist.com/it-threat-evolution-q2-2015/71610/","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":65.4,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 4109 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.94,"detail":"percentile 0.9968"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"1 Exploit-DB entry; 1 PoC-in-GitHub repo; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":1.59,"detail":"4 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}