CVE-2015-7635

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR…

published October 18, 2015

CVSS
—
EPSS
6%
Percentile
93.3
In the wild
Unconfirmed
What it is

⚠️ A sneaky use-after-free in Adobe Flash Player could open the door for attackers to execute arbitrary code. If you're running versions before 18.0.0.252 on Windows or OS X, it's time to pay attention! Think of it like a chef forgetting to remove a dish from the oven. If they try to use it again without checking, it could lead to a disastrous mix-up, much like how this vulnerability allows attackers to exploit the leftover memory space. An attacker could leverage this flaw to run their own code on your system, potentially gaining control or accessing sensitive information. This could lead to severe breaches of security and privacy, leaving your data at risk.

Put simply

Think of it like a chef forgetting to remove a dish from the oven. If they try to use it again without checking, it could lead to a disastrous mix-up, much like how this vulnerability allows attackers to exploit the leftover memory space. This use-after-free vulnerability occurs when memory is accessed after it has been freed, allowing malicious actors to execute arbitrary code through unspecified methods. Essentially, it's like having a backstage pass to your system's script!

What to do

An attacker could leverage this flaw to run their own code on your system, potentially gaining control or accessing sensitive information. This could lead to severe breaches of security and privacy, leaving your data at risk. Upgrade to Adobe Flash Player version 18.0.0.252 or later, 19.0.0.207 or later for Windows and OS X, or 11.2.202.535 or later for Linux. Ensure that Adobe AIR and its SDK are also updated to version 19.0.0.213 or higher to mitigate this risk. You've got this! Keep your software updated, and you'll be a security hero in no time! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06010 · 93.3th percentile
Published
2015-10-18T10:00Z
EPSS history
Timeline
  • 18 OCT 10:00Z
    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR…
    cvelistv5