CVE-2015-0329

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute…

published February 6, 2015

CVSS
—
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky memory corruption issue lurks in older versions of Adobe Flash Player, just waiting for a chance to be exploited! Think of it like a waiter at a restaurant who forgets the last order and accidentally serves the wrong dish, causing confusion and chaos in the kitchen. In this case, that wrong dish could lead to disastrous results for your system! An attacker could potentially execute arbitrary code or even cause your system to crash, effectively denying service. This could mean anything from losing unsaved work to letting malicious actors take control of your machine!

Put simply

Think of it like a waiter at a restaurant who forgets the last order and accidentally serves the wrong dish, causing confusion and chaos in the kitchen. In this case, that wrong dish could lead to disastrous results for your system! This vulnerability in Adobe Flash Player allows attackers to exploit memory corruption issues through unspecified vectors, enabling them to execute arbitrary code or crash the application.

What to do

An attacker could potentially execute arbitrary code or even cause your system to crash, effectively denying service. This could mean anything from losing unsaved work to letting malicious actors take control of your machine! Immediately update Adobe Flash Player to versions 13.0.0.269 and above for Windows and OS X, and 11.2.202.442 for Linux. If updates are no longer available, consider removing Flash altogether as it is no longer supported by Adobe. You've got this! Follow these steps to keep your systems safe and secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06132 · 93.4th percentile
Published
2015-02-06T00:00Z
EPSS history
Timeline
  • 06 FEB 00:00Z
    Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute…
    cvelistv5