CVE catalog

CVE-2015-0349

UBUNTU-CVE-2015-0349

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
8.15% · Oct 25, 2026

Adobe Flash Player was updated to 11.2.202.457 to fix several security issues that could lead to remote code execution. An exploit for CVE-2015-3043 was reported to exist in the wild. The following vulnerabilities were fixed: * Memory corruption vulnerabilities that could lead to code execution (CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043). * Type confusion vulnerability that could lead to code execution (CVE-2015-0356). * Buffer overflow vulnerability that could lead to code execution (CVE-2015-0348). * Use-after-free vulnerabilities that could lead to code execution (CVE-2015-0349, CVE-2015-0351, CVE-2015-0358, CVE-2015-3039). * Double-free vulnerabilities that could lead to code execution (CVE-2015-0346, CVE-2015-0359). * Memory leak vulnerabilities that could be used to bypass ASLR (CVE-2015-0357, CVE-2015-3040). * Security bypass vulnerability that could lead to information disclosure (CVE-2015-3044).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Suseflash-playerlinux enterprise desktop 1211.2.202.457-80.1fixed
Suseflash-playerlinux enterprise workstation extension 1211.2.202.457-80.1fixed
Ubuntuflashplugin-nonfree14.0411.2.202.310ubuntu1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.327ubuntu0.13.10.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.332ubuntu1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.335ubuntu1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.336ubuntu1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.341ubuntu1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.346ubuntu1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.350ubuntu1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.356ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.359ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.378ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.394ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.400ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.406ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.406ubuntu0.14.04.2vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.411ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.418ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.424ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.425ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.429ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.438ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.440ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.442ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.451ubuntu0.14.04.1vulnerable
Ubuntuflashplugin-nonfree14.0411.2.202.457ubuntu0.14.04.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Suseflash-playerrpmlinux enterprise desktop 1211.2.202.457-80.1Not reportedSUSE-SU-2015:0722-1Not reported
Suseflash-playerrpmlinux enterprise workstation extension 1211.2.202.457-80.1Not reportedSUSE-SU-2015:0722-1Not reported
Ubuntuflashplugin-nonfreedeb14.0411.2.202.457ubuntu0.14.04.1Not reportedUBUNTU-CVE-2015-0349Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]