CVE-2015-5579

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR…

published September 22, 2015

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

⚠️ A sneaky memory corruption vulnerability in Adobe Flash Player could let attackers run arbitrary code or crash your system! 😱 Think of it like a restaurant that serves meals with a surprise ingredient — if the chef isn’t careful, a disastrous dish might just make it to your table and ruin your night. This vulnerability allows unwanted code to sneak in, just like that surprise ingredient you never ordered. An attacker could exploit this flaw to execute arbitrary code, meaning they could take control of your system or cause it to crash unexpectedly. It's a risky scenario that could lead to data loss or a server going down — absolutely devastating for any user!

Put simply

Think of it like a restaurant that serves meals with a surprise ingredient — if the chef isn’t careful, a disastrous dish might just make it to your table and ruin your night. This vulnerability allows unwanted code to sneak in, just like that surprise ingredient you never ordered. This vulnerability allows for stack memory corruption through unspecified vectors, enabling attackers to run their own code within the affected Flash Player versions on Windows, OS X, and Linux.

What to do

An attacker could exploit this flaw to execute arbitrary code, meaning they could take control of your system or cause it to crash unexpectedly. It's a risky scenario that could lead to data loss or a server going down — absolutely devastating for any user! To address this vulnerability, make sure to update Adobe Flash Player to version 18.0.0.241 or later for Windows and OS X, and 11.2.202.521 or later for Linux. For Adobe AIR, update to version 19.0.0.190 or later. Always keep your software up to date to avoid such vulnerabilities! You've got this! Keep your systems secure, and stay vigilant with those updates! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06365 · 93.6th percentile
Published
2015-09-22T10:00Z
EPSS history
Timeline
  • 22 SEP 10:00Z
    Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR…
    cvelistv5