CVE-2015-0359

Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux…

published April 14, 2015

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.8th percentile for exploit probability.

CVSS
—
EPSS
92%
Percentile
99.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky double free vulnerability lurks in Adobe Flash Player, allowing attackers to execute arbitrary code! If you're using versions before 13.0.0.281 or 17.0.0.169, it's time to pay attention! 🔥 Think of it like a chef accidentally discarding the same ingredient twice when preparing a dish — it can lead to some unexpected flavors in your meal that weren’t intended. Similarly, this double free vulnerability can let attackers stir in their own malicious code! An attacker could potentially exploit this vulnerability to run arbitrary code on your system, which is absolutely devastating. They could take control of the affected machine, access confidential data, or even disrupt operations at a critical moment. This could lead to significant security breaches and loss of trust.

Put simply

Think of it like a chef accidentally discarding the same ingredient twice when preparing a dish — it can lead to some unexpected flavors in your meal that weren’t intended. Similarly, this double free vulnerability can let attackers stir in their own malicious code! This double free vulnerability occurs when memory is improperly managed, allowing an attacker to execute arbitrary code via unspecified vectors. It particularly affects several versions of Adobe Flash Player on Windows, OS X, and Linux, which can lead to dangerous exploits.

What to do

An attacker could potentially exploit this vulnerability to run arbitrary code on your system, which is absolutely devastating. They could take control of the affected machine, access confidential data, or even disrupt operations at a critical moment. This could lead to significant security breaches and loss of trust. To protect yourself, upgrade to Adobe Flash Player version 13.0.0.281 or later, and for 14.x through 17.x, make sure you’re on version 17.0.0.169 or higher. Regularly update your software and monitor Adobe's security advisories for any further updates to ensure you're always protected. You've got this! Keep your software updated, and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.92109 · 99.8th percentile
Published
2015-04-14T22:00Z
EPSS history
Timeline
  • 14 APR 22:00Z
    Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux…
    cvelistv5