CVE-2015-0312

Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16.0.0.296 on Windows and OS X and before 11.2.202.440 on Linux allows attackers to execute arbitrary code via unspecified vectors.

Score

CVSS 2.0 9.3 Critical

Status

Modified - psirt@adobe.com

Published

2015-01-28

Last modified

2024-08-06

Weaknesses

CWE-415

Affected products

• Flash Player (Adobe)
• Flash Player Desktop Runtime (Adobe)

References

• http://helpx.adobe.com/security/products/flash-player/apsb15-03.html
• http://secunia.com/advisories/62432
• http://secunia.com/advisories/62543
• http://secunia.com/advisories/62660
• http://www.securityfocus.com/bid/72343
• http://www.securitytracker.com/id/1031634
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100394
• https://technet.microsoft.com/library/security/2755801