Flash Player <= 16.0.0.235 Multiple Vulnerabilities (APSB15-01)

Versions of Adobe Flash player equal or prior to 16.0.0.235 are outdated and thus unpatched for the following vulnerabilities :

• An unspecified improper file validation issue. (CVE-2015-0301)

• An unspecified information disclosure vulnerability, which can be exploited to capture keystrokes. (CVE-2015-0302)

• Multiple memory corruption vulnerabilities allow an attacker to execute arbitrary code. (CVE-2015-0303, CVE-2015-0306)

• Multiple heap-based buffer overflow vulnerabilities that can be exploited to execute arbitrary code. (CVE-2015-0304, CVE-2015-0309)

• An unspecified type confusion vulnerability that can lead to code execution. (CVE-2015-0305)

• An out-of-bounds read vulnerability that can be exploited to leak memory addresses. (CVE-2015-0307)

• A use-after-free vulnerability that results in arbitrary code execution. (CVE-2015-0308)