CVE-2015-0358

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on…

published April 14, 2015

CVSS
—
EPSS
10%
Percentile
95.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free vulnerability in Adobe Flash Player could let attackers run arbitrary code on your system! 🔥 Think of it like a chef tossing away expired ingredients but forgetting to turn off the gas — a dangerous situation waiting to happen! If exploited, this vulnerability can allow an attacker to execute malicious code on affected systems, potentially leading to full control over the machine. While the details are a bit murky, the risk of unexpected chaos is real!

Put simply

Think of it like a chef tossing away expired ingredients but forgetting to turn off the gas — a dangerous situation waiting to happen! This use-after-free vulnerability occurs when Adobe Flash Player does not properly manage memory, allowing an attacker to manipulate memory allocation and execute arbitrary code. It affects versions up to 13.0.0.281 and from 14.x to 17.x up to 17.0.0.169 on Windows and OS X, as well as prior versions on Linux.

What to do

If exploited, this vulnerability can allow an attacker to execute malicious code on affected systems, potentially leading to full control over the machine. While the details are a bit murky, the risk of unexpected chaos is real! To protect your systems, update Adobe Flash Player to the latest version immediately. Ensure that you have disabled any plugins or features that rely on outdated versions, and consider removing Flash if it’s not needed for your workflow. Regularly check for software updates to stay secure! You've got this! With these steps, you'll tighten up your defenses in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10378 · 95.7th percentile
Published
2015-04-14T22:00Z
EPSS history
Timeline
  • 14 APR 22:00Z
    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on…
    cvelistv5