CVEvulnerability
CVE-2015-0331
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-02-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.
Affected configurations
• adobe flash player (<= 13.0.0.264)
• adobe flash player 14.0.0.125
• adobe flash player 14.0.0.145
• adobe flash player 14.0.0.176
• adobe flash player 14.0.0.179
• adobe flash player 15.0.0.152
• adobe flash player 15.0.0.167
• adobe flash player 15.0.0.189
• adobe flash player 15.0.0.223
• adobe flash player 15.0.0.239
• adobe flash player 15.0.0.246
• adobe flash player 16.0.0.235
• adobe flash player 16.0.0.257
• adobe flash player 16.0.0.287
• adobe flash player 16.0.0.296
• adobe flash player (<= 11.2.202.440)
References
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html lists.opensuse.org
- http://www.securityfocus.com/bid/72698 www.securityfocus.com
- https://helpx.adobe.com/security/products/flash-player/apsb15-04.html Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html lists.opensuse.org
- http://www.securityfocus.com/bid/72698 www.securityfocus.com
- https://helpx.adobe.com/security/products/flash-player/apsb15-04.html Patch, Vendor Advisory