NetSight
IP …
critical9.8Known exploitedPublic exploit code

CVE-2015-0313

Adobe Flash Player Use-After-Free Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-04-13. Federal due date: 2022-05-04.

The impacted product is end-of-life and should be disconnected if still in use.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.

Affected products

VendorProductAffected versions
AdobeFlash Player
before 11.2.202.442
before 13.0.0.269
from 14.0.0.125 before 16.0.0.305
OpensuseEvergreen
Version 11.4
OpensuseOpensuse
Versions 13.1, 13.2
SuseLinux Enterprise Desktop
Versions 11, 12
SuseLinux Enterprise Workstation Extension
Version 12
MicrosoftInternet Explorer
Versions 10, 11
MicrosoftEdge
All versions

Weakness classification

CWE-416

References