{"uuid": "7b990511-d6c9-436b-a705-e689a3683fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-5119", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/adobe_flash_hacking_team_uaf.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"Unknown\", \"juan vazquez \", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits an use after free on Adobe Flash Player. The vulnerability,\\n          discovered by Hacking Team and made public as part of the July 2015 data leak, was\\n          described as an Use After Free while handling ByteArray objects. This module has\\n          been tested successfully on:\\n\\n          Windows 7 SP1 (32-bit), IE11 and Adobe Flash 18.0.0.194,\\n          Windows 7 SP1 (32-bit), Firefox 38.0.5 and Adobe Flash 18.0.0.194,\\n          Windows 8.1 (32-bit), IE11 and Adobe Flash 18.0.0.194,\\n          Windows 8.1 (32-bit), Firefox and Adobe Flash 18.0.0.194, and\\n          Linux Mint \\\"Rebecca\\\" (32 bits), Firefox 33.0 and Adobe Flash 11.2.202.468.\", \"disclosure_date\": \"2015-07-06\", \"fullname\": \"exploit/multi/browser/adobe_flash_hacking_team_uaf\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 17:11:13 +0000\", \"name\": \"Adobe Flash Player ByteArray Use After Free\", \"needs_cleanup\": null, \"notes\": {\"AKA\": [\"0DayFlush\"], \"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/adobe_flash_hacking_team_uaf.rb\", \"platform\": \"Linux,Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"multi/browser/adobe_flash_hacking_team_uaf\", \"references\": [\"CVE-2015-5119\", \"URL-https://helpx.adobe.com/security/products/flash-player/apsa15-03.html\", \"URL-http://blog.trendmicro.com/trendlabs-security-intelligence/unpatched-flash-player-flaws-more-pocs-found-in-hacking-team-leak/\", \"URL-https://twitter.com/w3bd3vil/status/618168863708962816\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows\", \"Linux\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:26.915225Z"}