CVE-2015-7661

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR…

published November 11, 2015

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

🚨 A crafty getBounds call is all it takes for an attacker to hijack your Adobe Flash Player! Think of it like a restaurant's kitchen that accepts orders without checking if the ingredients are still fresh — with a single misguided order, the chef could unwittingly whip up something dangerous! This use-after-free vulnerability could allow attackers to execute arbitrary code, potentially taking control of the affected system. The aftermath? Data compromise, unauthorized access, or even system crashes!

Put simply

Think of it like a restaurant's kitchen that accepts orders without checking if the ingredients are still fresh — with a single misguided order, the chef could unwittingly whip up something dangerous! The vulnerability arises from a use-after-free flaw in Adobe Flash Player, allowing attackers to exploit the memory management of the application through crafted getBounds calls.

What to do

This use-after-free vulnerability could allow attackers to execute arbitrary code, potentially taking control of the affected system. The aftermath? Data compromise, unauthorized access, or even system crashes! Update your Adobe Flash Player to the latest version—ensure you're running at least 18.0.0.261 for Windows and OS X, or 11.2.202.548 for Linux. If you're using Adobe AIR, make sure it's updated to at least 19.0.0.241. Stay vigilant! You've got this! Follow these steps, and you'll be keeping your systems safe in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06171 · 93.5th percentile
Published
2015-11-11T11:00Z
EPSS history
Timeline
  • 11 NOV 11:00Z
    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR…
    cvelistv5