Published: 14/04/2015 Updated: 07/10/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Double free vulnerability in Adobe Flash Player prior to 13.0.0.281 and 14.x up to and including 17.x prior to 17.0.0.169 on Windows and OS X and prior to 11.2.202.457 on Linux allows malicious users to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe flash_player 14.0.0.176
adobe flash_player 14.0.0.179
adobe flash_player 16.0.0.235
adobe flash_player 16.0.0.257
adobe flash_player 15.0.0.152
adobe flash_player 15.0.0.167
adobe flash_player 16.0.0.287
adobe flash_player 16.0.0.296
adobe flash_player
adobe flash_player 15.0.0.189
adobe flash_player 15.0.0.223
adobe flash_player 17.0.0.134
adobe flash_player 14.0.0.125
adobe flash_player 14.0.0.145
adobe flash_player 15.0.0.239
adobe flash_player 15.0.0.246

Double free vulnerability in Adobe Flash Player before 1300281 and 14x through 17x before 1700169 on Windows and OS X and before 112202457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346 ...

## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Powershell include Msf::Exploit::Remote::BrowserExploitServer def initialize(info={}) super ...

This Metasploit module exploits a use-after-free vulnerability in Adobe Flash Player The vulnerability occurs when the ByteArray assigned to the current ApplicationDomain is freed from an ActionScript worker, when forcing a reallocation by copying more contents than the original capacity, but Flash forgets to update the domainMemory pointer, leadi ...

NVD-CWE-Other https://helpx.adobe.com/security/products/flash-player/apsb15-06.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html http://rhn.redhat.com/errata/RHSA-2015-0813.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html https://security.gentoo.org/glsa/201504-07 http://www.securitytracker.com/id/1032105 http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html http://www.securityfocus.com/bid/74067 https://nvd.nist.gov https://www.exploit-db.com/exploits/36956/https://access.redhat.com/security/cve/cve-2015-0359

CVE-2015-0359

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect