PT-2015-1185 · Adobe+3 · Flash Player+3

Published

2015-02-05

·

Updated

2017-09-08

·

CVE-2015-0327

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 13.0.0.269 Adobe Flash Player versions 14.x through 16.x before 16.0.0.305 Adobe Flash Player versions prior to 11.2.202.442 on Linux
Description The issue is related to a heap-based buffer overflow in Adobe Flash Player, which can be exploited by a remote attacker to execute arbitrary code.
Recommendations For Adobe Flash Player versions prior to 13.0.0.269, update to version 13.0.0.269 or later. For Adobe Flash Player versions 14.x through 16.x, update to version 16.0.0.305 or later. For Adobe Flash Player versions prior to 11.2.202.442 on Linux, update to version 11.2.202.442 or later.

Exploit

Fix

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2015-1142
BDU:2015-10090
BDU:2015-10091
CVE-2015-0327
MGASA-2015-0054
OPENSUSE-SU-2015_0237-1
RHSA-2015:0140
RHSA-2015_0140
SUSE-SU-2015:0236-1

Affected Products

Alt Linux
Flash Player
Red Hat
Suse