{"uuid": "270f7ec7-22de-4edf-92bf-61ed41329fab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-3113", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/adobe_flash_nellymoser_bof.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"Unknown\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a buffer overflow on Adobe Flash Player when handling nellymoser\\n          encoded audio inside a FLV video, as exploited in the wild on June 2015. This module\\n          has been tested successfully on:\\n\\n          Windows 7 SP1 (32-bit), IE11 and Adobe Flash 18.0.0.160,\\n          Windows 7 SP1 (32-bit), Firefox 38.0.5 and Adobe Flash 18.0.0.160,\\n          Windows 8.1, Firefox 38.0.5 and Adobe Flash 18.0.0.160,\\n          Linux Mint \\\"Rebecca\\\" (32 bits), Firefox 33.0 and Adobe Flash 11.2.202.466, and\\n          Ubuntu 14.04.2 LTS, Firefox 35.01, and Adobe Flash 11.2.202.466.\\n\\n          Note that this exploit is effective against both CVE-2015-3113 and the\\n          earlier CVE-2015-3043, since CVE-2015-3113 is effectively a regression\\n          to the same root cause as CVE-2015-3043.\", \"disclosure_date\": \"2015-06-23\", \"fullname\": \"exploit/multi/browser/adobe_flash_nellymoser_bof\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 17:11:13 +0000\", \"name\": \"Adobe Flash Player Nellymoser Audio Decoding Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/adobe_flash_nellymoser_bof.rb\", \"platform\": \"Linux,Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"multi/browser/adobe_flash_nellymoser_bof\", \"references\": [\"CVE-2015-3043\", \"CVE-2015-3113\", \"URL-https://helpx.adobe.com/security/products/flash-player/apsb15-06.html\", \"URL-https://helpx.adobe.com/security/products/flash-player/apsb15-14.html\", \"URL-http://blog.trendmicro.com/trendlabs-security-intelligence/new-adobe-zero-day-shares-same-root-cause-as-older-flaws/\", \"URL-http://malware.dontneedcoffee.com/2015/06/cve-2015-3113-flash-up-to-1800160-and.html\", \"URL-http://bobao.360.cn/learning/detail/357.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows\", \"Linux\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:27.111162Z"}