CVE-2015-0342

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on…

published March 13, 2015

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free vulnerability in Adobe Flash Player is lurking in versions before 13.0.0.277 and 14.x through 17.x before 17.0.0.134! This little gremlin could let an attacker execute arbitrary code on your computer! 🔥 Think of it as a waiter forgetting to take a plate off the table after it’s been served; the next guest sits down and accidentally eats leftover food without realizing it — in this case, malicious code! If exploited, an attacker could potentially run any code of their choice on your system, leaving your data vulnerable to tampering or theft. It’s like a burglar being able to walk right through your front door without a key!

Put simply

Think of it as a waiter forgetting to take a plate off the table after it’s been served; the next guest sits down and accidentally eats leftover food without realizing it — in this case, malicious code! This use-after-free vulnerability occurs when Adobe Flash Player mistakenly keeps a reference to an already freed memory location. This allows attackers to execute arbitrary code by manipulating memory access during execution.

What to do

If exploited, an attacker could potentially run any code of their choice on your system, leaving your data vulnerable to tampering or theft. It’s like a burglar being able to walk right through your front door without a key! To protect yourself, ensure you update Adobe Flash Player to the latest version or at least to 13.0.0.277 or 17.0.0.134 or higher. Regularly check for software updates to keep security tight! You've got this! Keep your software updated, and you’ll be well on your way to security hero status! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06744 · 93.9th percentile
Published
2015-03-13T17:00Z
EPSS history
Timeline
  • 13 MAR 17:00Z
    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on…
    cvelistv5