CVE-2015-0328

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a…

published February 6, 2015

CVSS
—
EPSS
6%
Percentile
92.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky NULL pointer dereference can bring Adobe Flash Player to its knees. If you’re running vulnerable versions, the door is wide open for a denial of service! 🔥 Think of this as a restaurant that suddenly loses its chef — without someone to cook, diners are left waiting with empty plates, and the whole place grinds to a halt. In this case, Flash Player just stops working due to a critical oversight in its operation. An attacker could exploit this vulnerability to cause a denial of service, effectively crashing the Flash Player application. This is like a power outage at a crucial moment, leaving users unable to access content and disrupting their experience.

Put simply

Think of this as a restaurant that suddenly loses its chef — without someone to cook, diners are left waiting with empty plates, and the whole place grinds to a halt. In this case, Flash Player just stops working due to a critical oversight in its operation. This vulnerability in Adobe Flash Player allows an attacker to trigger a NULL pointer dereference, leading to a crash of the application. It's important to note that this vulnerability manifests through unknown vectors, making it more unpredictable and potentially harmful.

What to do

An attacker could exploit this vulnerability to cause a denial of service, effectively crashing the Flash Player application. This is like a power outage at a crucial moment, leaving users unable to access content and disrupting their experience. To protect against this vulnerability, update Adobe Flash Player to version 13.0.0.269 or later for Windows and OS X, or 11.2.202.442 or later for Linux. Regularly check for updates to ensure you’re always running the latest version. 🛡️ You've got this! Stay vigilant with your updates and keep your systems secure! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05515 · 92.7th percentile
Published
2015-02-06T00:00Z
EPSS history
Timeline
  • 06 FEB 00:00Z
    Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a…
    cvelistv5