CVE-2015-7660

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR…

published November 11, 2015

CVSS
—
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

🚨 A crafty use-after-free vulnerability in Adobe Flash Player could let attackers execute arbitrary code with just the right setMask arguments! ⚡ Think of it like a restaurant that serves a dish with a secret ingredient no one really knows about. If the chef doesn’t handle that ingredient carefully when preparing the meal, it could lead to a complete culinary disaster! 🍽️ If exploited, this vulnerability could allow attackers to run their own code on your system, which is absolutely devastating. Imagine malicious actors having the power to take control of your device, steal sensitive data, or install harmful software. You definitely want to avoid that!

Put simply

Think of it like a restaurant that serves a dish with a secret ingredient no one really knows about. If the chef doesn’t handle that ingredient carefully when preparing the meal, it could lead to a complete culinary disaster! 🍽️ This use-after-free vulnerability occurs when Flash Player improperly handles specific setMask arguments, allowing remote code execution. This flaw affects multiple versions of Adobe Flash Player and Adobe AIR, notably before their respective fixed versions.

What to do

If exploited, this vulnerability could allow attackers to run their own code on your system, which is absolutely devastating. Imagine malicious actors having the power to take control of your device, steal sensitive data, or install harmful software. You definitely want to avoid that! To safeguard your systems, upgrade Adobe Flash Player to version 18.0.0.261 or higher, and for Adobe AIR, ensure you're on version 19.0.0.241 or above. Check for any updates regularly and consider disabling Flash in your browser if it's not necessary. 🛡️ You've got this! Follow these actions to secure your setup and keep those pesky attackers at bay! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06171 · 93.4th percentile
Published
2015-11-11T11:00Z
EPSS history
Timeline
  • 11 NOV 11:00Z
    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR…
    cvelistv5