CVE-2015-0349

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on…

published April 14, 2015

CVSS
—
EPSS
8%
Percentile
94.8
In the wild
Unconfirmed
What it is

⚠️ A classic use-after-free vulnerability in Adobe Flash Player could let attackers execute arbitrary code—like a magician pulling a rabbit out of an empty hat! 🎩✨ Think of it like a library that forgets to take a book off the shelves after someone returns it. An attacker can sneak in and grab that book to read or change the information held within—cunning, right? While this vulnerability hasn't been widely exploited yet, an attacker could gain control of your system through it, potentially leading to unauthorized access, data theft, or even injecting malicious software. It's crucial to take this seriously!

Put simply

Think of it like a library that forgets to take a book off the shelves after someone returns it. An attacker can sneak in and grab that book to read or change the information held within—cunning, right? The use-after-free vulnerability in Adobe Flash Player occurs when the application continues to use a memory resource after it has been freed, allowing attackers to manipulate the memory in unexpected and dangerous ways.

What to do

While this vulnerability hasn't been widely exploited yet, an attacker could gain control of your system through it, potentially leading to unauthorized access, data theft, or even injecting malicious software. It's crucial to take this seriously! To protect yourself, update Adobe Flash Player to the latest version available, ensuring you're at least on version 13.0.0.281 or 17.0.0.169 for OS X and Windows. Regularly check for patches to keep your system secure. 🛡️ You've got this! Stay ahead of vulnerabilities with timely updates and you'll keep your digital world safe! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08151 · 94.8th percentile
Published
2015-04-14T22:00Z
EPSS history
Timeline
  • 14 APR 22:00Z
    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on…
    cvelistv5