CVE-2015-0335

Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute…

published March 13, 2015

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

⚠️ You might want to pay attention to this vulnerability in Adobe Flash Player — it can let attackers throw arbitrary code like a baseball at your system! ⚡ Think of this as a cafe with a faulty coffee machine. Someone sneaks in and presses all the buttons, causing a mess that could spill everywhere — that's what could happen here with a little crafty manipulation. If exploited, attackers could execute their own malicious code or even crash the application, leading to a denial of service. This could mean compromised systems and disrupted services, a recipe for chaos!

Put simply

Think of this as a cafe with a faulty coffee machine. Someone sneaks in and presses all the buttons, causing a mess that could spill everywhere — that's what could happen here with a little crafty manipulation. This vulnerability allows attackers to execute arbitrary code or trigger memory corruption in Adobe Flash Player through unspecified vectors, affecting various versions on Windows, OS X, and Linux.

What to do

If exploited, attackers could execute their own malicious code or even crash the application, leading to a denial of service. This could mean compromised systems and disrupted services, a recipe for chaos! To protect yourself, ensure you're using Adobe Flash Player version 13.0.0.277 or later, or 17.0.0.134 or later for the 14.x to 17.x versions. If you're on Linux, update to at least version 11.2.202.451 immediately. Regular updates are your best friend! You've got this! Stay vigilant and keep your software updated, and you'll be a security hero in no time! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05307 · 92.5th percentile
Published
2015-03-13T17:00Z
EPSS history
Timeline
  • 13 MAR 17:00Z
    Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute…
    cvelistv5