Adobe Flash Player - Arbitrary Code Execution

🗓️ 25 Mar 2015 00:00:00Reported by SecurityObscurityType

exploitpack👁 38 Views

Adobe Flash Player - Arbitrary Code Execution vulnerability (CVE-2015-0313) discovered from Angler Exploit Ki

Reporter	Title	Published	Views	Family All 77
0day.today	Adobe Flash Player ByteArray With Workers Use After Free Exploit	2 Apr 201500:00	–	zdt
GithubExploit	Exploit for Use After Free in Adobe Flash_Player	22 Mar 201508:37	–	githubexploit
ALT Linux	Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt41	6 Feb 201500:00	–	altlinux
Tenable Nessus	Google Chrome < 40.0.2214.111 Multiple Vulnerabilities	4 Mar 201500:00	–	nessus
Tenable Nessus	Flash Player < 16.0.0.306 (inferred) Multiple Vulnerabilities (APSB15-01 through 05)	27 Mar 201500:00	–	nessus
Tenable Nessus	Flash Player <= 16.0.0.296 Multiple Vulnerabilities (APSB15-04)	27 Mar 201500:00	–	nessus
Tenable Nessus	Flash Player <= 16.0.0.296 Unspecified Code Execution (APSA15-02 / APSB15-04)	2 Feb 201500:00	–	nessus
Tenable Nessus	FreeBSD : Adobe Flash Player -- critical vulnerability (734bcd49-aae6-11e4-a0c1-c485083ca99c) (deprecated)	3 Feb 201500:00	–	nessus
Tenable Nessus	Flash Player For Mac <= 16.0.0.296 Unspecified Code Execution (APSA15-02 / APSB15-04)	2 Feb 201500:00	–	nessus
Tenable Nessus	openSUSE Security Update : flash-player (openSUSE-2015-118)	9 Feb 201500:00	–	nessus

Source: https://github.com/SecurityObscurity/cve-2015-0313

PoC: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/36491.zip

Adobe Flash vulnerability source code (cve-2015-0313) from Angler Exploit Kit

Reference:

http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/
http://malware.dontneedcoffee.com/2015/02/cve-2015-0313-flash-up-to-1600296-and.html
https://helpx.adobe.com/security/products/flash-player/apsa15-02.html

25 Mar 2015 00:00Current

1.1Low risk

Vulners AI Score1.1

EPSS0.95683