Skip to content
skopnix
Dossier · Vulnerability

Actively exploited · CISA KEV

CVE-2015-3113

  1. First PoC
  2. 3816 days →Metasploit
  3. 304 days →First cited attacker

Signals

Exploited in the wild
Yesadded 2022-04-13 · due 2022-05-04. An observation, not a forecast.
EPSS · 30-day forecast
99.8%Chance of exploitation in the next 30 days, 100th percentile of all CVEs. A forecast; KEV outranks it.
CVSS · NVD
not stated by sourcesNo NVD record yet.
Internet exposure
not stated by sourcesNo exposure census on this CVE's dispatches.

Exploits

2 known · links only

Metasploit1

  1. Adobe Flash Player Nellymoser Audio Decoding Buffer Overflow ↗

    This module exploits a buffer overflow on Adobe Flash Player when handling nellymoser encoded audio inside a FLV video, as exploited in the wild on June 2015. This module has been tested successfully on: Windows 7 SP1 (32-bit), IE11 and Adobe Flash 18.0.0.160, Windows 7 SP1 (32-bit), Firefox 38.0.5 and Adobe Flash 18.0.0.160, Windows 8.1, Firefox 38.0.5 and Adobe Flash 18.0.0.160, Linux Mint "Rebecca" (32 bits), Firefox 33.0 and Adobe

    ruby · seen 2026-10-18

Exploit-DB1

  1. Adobe Flash Player - Nellymoser Audio Decoding Buffer Overflow (Metasploit) ↗

    created 2015-07-08

On the wire

0 dispatches

No dispatch on our wire has named this CVE yet.

Watch this one?

KEV additions reach Telegram and the KEV-only RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.