{"id":"CVE-2015-3104","published":"2015-06-10T01:00:00Z","modified":"2024-08-06T05:39:31Z","title":"Integer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Integer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.05745,"percentile":0.93034,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2015-07-30","exploitedFirstSeen":"2015-07-30","ransomware":false,"evidence":[{"url":"https://securelist.com/it-threat-evolution-q2-2015/71610/","date":"2015-07-30"},{"url":"https://securelist.com/kaspersky-security-bulletin-2015-overall-statistics-for-2015/73038/","date":"2015-12-15"}],"evidenceTotal":2,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://helpx.adobe.com/security/products/flash-player/apsb15-11.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/75081","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securitytracker.com/id/1032519","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00009.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://security.gentoo.org/glsa/201506-01","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00011.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1086.html","tags":["vendor-advisory","x_refsource_REDHAT"]}],"techniques":[],"reports":[{"id":"SRC-619721166ae9d9d7fdcd","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/4/4/C/44CDEF0E-7924-4787-A56A-16261691ACE3/Microsoft_Security_Intelligence_Report_Volume_19_English.pdf","date":null,"mentions":[{"quote":"Adobe Flash Player APSB15-03 Angler\r\nCVE-2015-0313 Adobe Flash Player APSB15-04 Angler\r\nCVE-2015-0336 Adobe Flash Player APSB15-05 Nuclear (JS/Neclu); Angler\r\nCVE-2015-0359 Adobe Flash Player APSB15-06 Angler\r\nCVE-2015-3090 Adobe Flash Player APSB15-09 Angler\r\nCVE-2015-3104 Adobe Flash Player APSB15-11","start":81730,"end":82033},{"quote":"47\r\nCVE-2015-0311, 46, 47, 53\r\nCVE-2015-0313, 46, 47, 53\r\nCVE-2015-0336, 47, 53\r\nCVE-2015-0359, 47, 53\r\nCVE-2015-1641, 16, 57\r\nCVE-2015-1701, 14, 18, 19, 57\r\nCVE-2015-1769, 57\r\nCVE-2015-1770, 57\r\nCVE-2015-2360, 57\r\nCVE-2015-2424, 16, 17\r\nCVE-2015-3043, 17, 18, 57\r\nCVE-2015-3090, 47\r\nCVE-2015-3104,","start":238412,"end":238710}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2015-3185","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3185","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2015-06-10","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2015-3104","provenance":"source"},{"date":"2015-07-30","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://securelist.com/it-threat-evolution-q2-2015/71610/","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":57.5,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 4109 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":18.61,"detail":"percentile 0.9303"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}