KLA10547 Multiple vulnerabilities in Adobe Flash Player

Detect date:

04/14/2015

Severity:

Critical

Description:

Memory corruption, buffer overflow, use-after-free, double free and memory leak vulnerabilities were found in Adobe Flash. By exploiting these vulnerabilities malicious users can bypass security restrictions, execute arbitrary code or obtain sensitive information. These vulnerabilities can be exploited remotely via an unknown vectors.

Affected products:

Adobe Flash Player for Linux versions earlier than 11.2.202.457
Adobe Flash Player versions earlier than 17.0.0.169
Adobe Flash Player Extended Support versions earlier than 13.0.0.281

Solution:

Update to the latest version
Get Flash Player

Original advisories:

Adobe bulletin

Impacts:

ACE

Related products:

Adobe Flash Player ActiveX

CVE-IDS:

CVE-2015-0357

Exploitation:

Public exploits exist for this vulnerability.