CVE-2015-0325

Description

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0326 and CVE-2015-0328.

10.0

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 8.68% Top 10%

Vendor Advisory gentoo.org Vendor Advisory opensuse.org Vendor Advisory opensuse.org Vendor Advisory opensuse.org Vendor Advisory redhat.com Vendor Advisory opensuse.org Vendor Advisory adobe.com

Affected: n/a n/a

References

Link	Tags
http://security.gentoo.org/glsa/glsa-201502-02.xml	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00008.html	vendor advisory
http://secunia.com/advisories/62895	third party advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/100711	vdb entry
http://www.securitytracker.com/id/1031706	vdb entry
http://secunia.com/advisories/62886	third party advisory
https://technet.microsoft.com/library/security/2755801
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00007.html	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00006.html	vendor advisory
http://www.securityfocus.com/bid/72514	vdb entry
https://helpx.adobe.com/security/products/flash-player/apsb15-04.html	patch vendor advisory
http://rhn.redhat.com/errata/RHSA-2015-0140.html	vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00009.html	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2015-0325?: CVE-2015-0325 has been scored as a critical severity vulnerability.
How to fix CVE-2015-0325?: To fix CVE-2015-0325, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2015-0325 being actively exploited in the wild?: It is possible that CVE-2015-0325 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~9% probability that this vulnerability will be exploited by malicious actors in the next 30 days.