CVE-2015-5584

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR…

published September 22, 2015

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

🚨 A use-after-free vulnerability in Adobe Flash could let attackers pull off some wild stunts! 🎢 Think of this as a magician who performs a trick but leaves the prop in play while moving on to the next—if someone exploits the slip, they could use that prop to conjure something unexpected! An attacker could leverage this vulnerability to execute arbitrary code, potentially leading to system compromise, data theft, or even full control over the affected machine. This could be absolutely devastating for anyone still using vulnerable Flash versions!

Put simply

Think of this as a magician who performs a trick but leaves the prop in play while moving on to the next—if someone exploits the slip, they could use that prop to conjure something unexpected! This vulnerability occurs when Adobe Flash Player continues to reference memory that has already been freed, allowing attackers to manipulate the program's behavior and execute malicious code.

What to do

An attacker could leverage this vulnerability to execute arbitrary code, potentially leading to system compromise, data theft, or even full control over the affected machine. This could be absolutely devastating for anyone still using vulnerable Flash versions! To protect your systems, make sure to update Adobe Flash Player to at least version 18.0.0.241 or 19.0.0.185, depending on your OS. Additionally, consider disabling Flash altogether if it's not needed, as it's often a target for exploits. You've got this! Stay updated and you'll keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04970 · 92.2th percentile
Published
2015-09-22T10:00Z
EPSS history
Timeline
  • 22 SEP 10:00Z
    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR…
    cvelistv5