CVE-2015-5122
CISA 기관 조치 기한: 2022-05-04
Adobe Flash Player
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.
KEV 필수 조치: The impacted product is end-of-life and should be disconnected if still in use.
타임라인
- NVD 공개
- CISA KEV 등재(실제 악용 확인) 공개 후 2,465일
- CISA 기관 조치 기한 경과
날짜 정보 없는 신호: Exploit-DB 등재
벡터: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
공개 익스플로잇 / PoC
- Exploit-DB: EDB-37599 ↗