{"id":"CVE-2015-0336","published":"2015-03-13T17:00:00Z","modified":"2024-08-06T04:03:10Z","title":"Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \"type confusion,\" a different vulnerability than CVE-2015-0334.","provenance":"source","from":"CVE.org"},"summary":{"text":"Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux is affected by a type confusion vulnerability that allows attackers to execute arbitrary code.","provenance":"ai","model":"deepseek-v4-flash","generatedAt":"2026-10-23T03:20:10Z"},"cvss":null,"epss":{"score":0.70445,"percentile":0.99387,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2015-06-05","exploitedFirstSeen":"2015-06-05","ransomware":false,"evidence":[{"url":"https://www.microsoft.com/en-us/security/blog/2015/06/17/understanding-type-confusion-vulnerabilities-cve-2015-0336/","date":"2015-06-05"},{"url":"https://securelist.com/kaspersky-security-bulletin-2015-overall-statistics-for-2015/73038/","date":"2015-12-15"}],"evidenceTotal":2,"provenance":"source"},"exploited":true,"otx":{"pulseCount":6,"pulses":[{"name":"Thor Lite Scanner - Cigabuntu (Parrot Version) vs. The Book of Shadows","url":"https://otx.alienvault.com/pulse/666ac558d08da6cfb3ba135b","created":"2024-06-13"},{"name":"Thor-Lite Linux 64 (06.11.24) - enriched a bit more but not 'pruned'","url":"https://otx.alienvault.com/pulse/6668b85065eec626e4766a38","created":"2024-06-11"},{"name":"Log4j","url":"https://otx.alienvault.com/pulse/61df005d9f0ff216afd15bdc","created":"2022-01-12"},{"name":"Ransomware: Night Sky","url":"https://otx.alienvault.com/pulse/61deff0101737ee62817cbd7","created":"2022-01-12"},{"name":"Infected Korean Website Installs Banking Malware","url":"https://otx.alienvault.com/pulse/5609d6b44637f21ecf299518","created":"2015-09-29"},{"name":"Angler EK Exploiting Adobe Flash CVE-2015-3090","url":"https://otx.alienvault.com/pulse/55653b1ab45ff54c8ee5b42c","created":"2015-05-27"}],"provenance":"machine"},"cwes":[],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00014.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://security.gentoo.org/glsa/201503-09","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"http://www.securitytracker.com/id/1031922","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://helpx.adobe.com/security/products/flash-player/apsb15-05.html","tags":["x_refsource_CONFIRM"]},{"url":"https://www.exploit-db.com/exploits/36962/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00017.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0697.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00015.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www.securityfocus.com/bid/73084","tags":["vdb-entry","x_refsource_BID"]}],"techniques":[{"id":"T1189","name":"Drive-by Compromise","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Flash content delivered via browser, drive-by exploitation","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"allows attackers to execute arbitrary code","start":130,"end":172}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1203","name":"Exploitation for Client Execution","tactics":["execution"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Arbitrary code runs inside Flash client application","mappingType":"primary_impact","evidence":[{"from":"description","quote":"allows attackers to execute arbitrary code","start":130,"end":172}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[{"id":"SRC-619721166ae9d9d7fdcd","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/4/4/C/44CDEF0E-7924-4787-A56A-16261691ACE3/Microsoft_Security_Intelligence_Report_Volume_19_English.pdf","date":null,"mentions":[{"quote":"CVE-2015-0336 Adobe Flash Player APSB15-05 Nuclear (JS/Neclu); Angler","start":81818,"end":81887},{"quote":"Exploit:SWF/Obfuscator.L mainly targets CVE-2015-0336.","start":93108,"end":93162},{"quote":"46\r\nCVE-2013-0422, 47, 49\r\nCVE-2013-2460, 46\r\nCVE-2013-2551, 46, 54\r\nCVE-2013-7331, 54\r\nCVE-2014-0322, 54\r\nCVE-2014-0497, 53\r\nCVE-2014-0515, 53\r\nCVE-2014-6332, 43, 44, 50\r\nCVE-2014-8439, 46, 53\r\nCVE-2015-0097, 57\r\nCVE-2015-0310, 47\r\nCVE-2015-0311, 46, 47, 53\r\nCVE-2015-0313, 46, 47, 53\r\nCVE-2015-0336, 47,","start":238183,"end":238488}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2015-0349","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-0349","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":36962,"url":"https://www.exploit-db.com/exploits/36962","title":"Adobe Flash Player - NetConnection Type Confusion (Metasploit)","type":"remote","platform":"windows","date":"2015-05-08","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2015-05-08"},"metasploit":[{"name":"Adobe Flash Player NetConnection Type Confusion","module":"exploit/multi/browser/adobe_flash_net_connection_confusion","type":"exploit","disclosureDate":"2015-03-12","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/adobe_flash_net_connection_confusion.rb"}],"first":{"date":"2015-03-12","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/adobe_flash_net_connection_confusion.rb"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/36962/"],"flow":[{"stage":"exploitation","techniques":["T1189"],"provenance":"ai"},{"stage":"primary","techniques":["T1203"],"provenance":"ai"}],"timeline":[{"date":"2015-03-12","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2015-05-08","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/adobe_flash_net_connection_confusion.rb","provenance":"source"},{"date":"2015-03-13","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2015-0336","provenance":"source"},{"date":"2015-06-05","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.microsoft.com/en-us/security/blog/2015/06/17/understanding-type-confusion-vulnerabilities-cve-2015-0336/","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":65.7,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 4164 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.88,"detail":"percentile 0.9939"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":1.92,"detail":"6 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}