CVE-2015-0346
Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 10.4%, higher than 95% of all known CVEs. Patch or mitigate before the next change window.
Description
Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 10.38% probability · 95th percentile
- CISA KEV
- Not listed
- Affected
- redhat/enterprise linux desktop supplementary · redhat/enterprise linux server supplementary · redhat/enterprise linux server supplementary eus · redhat/enterprise linux workstation supplementary · opensuse/opensuse · suse/suse linux enterprise desktop · suse/suse linux workstation extension · adobe/flash player
- Source
- psirt@adobe.com
References
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html
- http://rhn.redhat.com/errata/RHSA-2015-0813.htmlThird Party Advisory
- http://www.securityfocus.com/bid/74067
- http://www.securitytracker.com/id/1032105
- https://helpx.adobe.com/security/products/flash-player/apsb15-06.htmlPatch, Vendor Advisory
- https://security.gentoo.org/glsa/201504-07
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html
- http://rhn.redhat.com/errata/RHSA-2015-0813.htmlThird Party Advisory
- http://www.securityfocus.com/bid/74067
- http://www.securitytracker.com/id/1032105
- https://helpx.adobe.com/security/products/flash-player/apsb15-06.htmlPatch, Vendor Advisory
- https://security.gentoo.org/glsa/201504-07
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.