CVE-2015-0346

Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux…

published April 14, 2015

CVSS
—
EPSS
10%
Percentile
95.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky double free vulnerability lurks in Adobe Flash Player versions before 13.0.0.281 on Windows and OS X, and before 11.2.202.457 on Linux! This flaw could let attackers slip in with some crafty code. 🔥 Think of it like a restaurant that accidentally lets someone order the same dish twice, leading to a confusing mix-up in the kitchen — the system can become unstable and serve up something unexpected! If exploited, an attacker could execute arbitrary code, leading to a potentially chaotic situation where they manipulate the system to their advantage. This could put sensitive data at serious risk, making it a situation no one wants to find themselves in!

Put simply

Think of it like a restaurant that accidentally lets someone order the same dish twice, leading to a confusing mix-up in the kitchen — the system can become unstable and serve up something unexpected! This double free vulnerability occurs when the program frees up memory space twice without checking if it's already been freed, creating opportunities for attackers to inject malicious code into the system.

What to do

If exploited, an attacker could execute arbitrary code, leading to a potentially chaotic situation where they manipulate the system to their advantage. This could put sensitive data at serious risk, making it a situation no one wants to find themselves in! To protect yourself, make sure you update Adobe Flash Player to the latest version as soon as possible. Regularly check for updates and consider disabling Flash altogether if it's not in use. 🛡️ You've got this! Stay proactive and secure your systems to keep those pesky attackers at bay! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10378 · 95.7th percentile
Published
2015-04-14T22:00Z
EPSS history
Timeline
  • 14 APR 22:00Z
    Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux…
    cvelistv5