CVE-2015-0322

Description

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0320.

10.0

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 6.64% Top 10%

Vendor Advisory gentoo.org Vendor Advisory opensuse.org Vendor Advisory opensuse.org Vendor Advisory opensuse.org Vendor Advisory redhat.com Vendor Advisory opensuse.org Vendor Advisory adobe.com

Affected: n/a n/a

References

Link	Tags
http://security.gentoo.org/glsa/glsa-201502-02.xml	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00008.html	vendor advisory
http://secunia.com/advisories/62895	third party advisory
http://www.securitytracker.com/id/1031706	vdb entry
http://secunia.com/advisories/62886	third party advisory
https://technet.microsoft.com/library/security/2755801
http://secunia.com/advisories/62777	third party advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/100699	vdb entry
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00007.html	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00006.html	vendor advisory
http://www.securityfocus.com/bid/72514	vdb entry
https://helpx.adobe.com/security/products/flash-player/apsb15-04.html	patch vendor advisory
http://rhn.redhat.com/errata/RHSA-2015-0140.html	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00009.html	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2015-0322?: CVE-2015-0322 has been scored as a critical severity vulnerability.
How to fix CVE-2015-0322?: To fix CVE-2015-0322, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2015-0322 being actively exploited in the wild?: It is possible that CVE-2015-0322 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~7% probability that this vulnerability will be exploited by malicious actors in the next 30 days.