CVE-2015-0301: Input Validation
Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0301?
The severity of CVE-2015-0301 is rated as critical due to potential exploitation leading to remote code execution.
How do I fix CVE-2015-0301?
To fix CVE-2015-0301, it is recommended to update Adobe Flash Player and Adobe AIR to the latest versions available.
What versions of Adobe Flash Player are affected by CVE-2015-0301?
CVE-2015-0301 affects Adobe Flash Player versions prior to 13.0.0.260 and 14.x through 16.x before 16.0.0.257.
Is Adobe AIR impacted by CVE-2015-0301?
Yes, Adobe AIR versions prior to 16.0.0.245 for Windows and OS X are affected by CVE-2015-0301.
Can CVE-2015-0301 affect Linux platforms?
Yes, CVE-2015-0301 impacts Adobe Flash Player version 11.2.202.429 on Linux.