CVE-2015-0311
CRITICAL KEV RANSOMWAREAdobe Flash Player ByteArray UncompressViaZlibVariant Use After Free
Title source: metasploitExploitation Summary
CVE-2015-0311 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added April 13, 2022, with confirmed use in ransomware campaigns.
EIP tracks 4 public exploits from researchers including Metasploit, jr64, d0now, including a Metasploit module exploits/multi/browser/adobe_flash_uncompress_zlib_uaf.
AI-analyzed exploit summary This Metasploit module exploits a use-after-free vulnerability in Adobe Flash Player's ByteArray::UncompressViaZlibVariant method. It delivers a malicious SWF file to trigger the vulnerability and execute arbitrary code via a PowerShell payload.
Description
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.
Exploits (4)
This Metasploit module exploits a use-after-free vulnerability in Adobe Flash Player's ByteArray::UncompressViaZlibVariant method. It delivers a malicious SWF file to trigger the vulnerability and execute arbitrary code via a PowerShell payload.
This repository is a reupload of a README file describing an old Linux/Firefox port of an exploit for CVE-2015-0311, a use-after-free vulnerability in Adobe Flash Player. The actual exploit code is not present in the provided files.
This Metasploit module exploits a use-after-free vulnerability in Adobe Flash Player's ByteArray::UncompressViaZlibVariant method. It delivers a malicious SWF file to trigger the vulnerability and achieve remote code execution on vulnerable systems.
References (16)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H