CVE-2015-5119
CRITICAL KEV RANSOMWAREAdobe Flash Player ByteArray Use After Free
Title source: metasploitExploitation Summary
CVE-2015-5119 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 3, 2022, with confirmed use in ransomware campaigns.
EIP tracks 7 public exploits from researchers including Metasploit, OpenSISE, CiscoCXSecurity, including a Metasploit module exploits/multi/browser/adobe_flash_hacking_team_uaf.
AI-analyzed exploit summary This Metasploit module exploits a use-after-free vulnerability in Adobe Flash Player (CVE-2015-5119) by delivering a malicious SWF file via a browser exploit server. It targets Windows and Linux systems with specific Flash versions and achieves remote code execution.
Description
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.
Exploits (7)
This Metasploit module exploits a use-after-free vulnerability in Adobe Flash Player (CVE-2015-5119) by delivering a malicious SWF file via a browser exploit server. It targets Windows and Linux systems with specific Flash versions and achieves remote code execution.
The repository contains only a README.md file with a title and no functional exploit code or technical details. It appears to be a placeholder without any meaningful content.
This repository contains a walkthrough for CVE-2015-5119, a vulnerability in Cisco CX. The README.md file does not include exploit code but provides documentation or steps related to the vulnerability.
This is a legitimate SWFObject library file, which is a JavaScript library used to embed Adobe Flash content. It is not an exploit itself but is part of the proof-of-concept for CVE-2015-5119, which involves a vulnerability in Adobe Flash Player.
This repository contains a proof-of-concept exploit for CVE-2015-5119, a COOP (Cross-Origin Object Protocol) vulnerability. The exploit leverages SWFObject to manipulate Flash objects, potentially bypassing same-origin policies.
This repository contains a functional Python3 script that hosts a web server to exploit Adobe Flash vulnerabilities (CVE-2015-3090, CVE-2015-3105, CVE-2015-5119, CVE-2015-5122) by serving malicious SWF files and executing a base64-encoded payload. The exploit supports both direct HTML and XSS-based attack paths.
This Metasploit module exploits a use-after-free vulnerability in Adobe Flash Player (CVE-2015-5119) by delivering a malicious SWF file via a browser exploit server. It achieves remote code execution by leveraging a crafted ByteArray object to corrupt memory and execute arbitrary payloads.
References (18)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H