CVE-2015-0307: Buffer Overflow
Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0307?
CVE-2015-0307 has a severity rating of critical due to potential code execution exploits.
How do I fix CVE-2015-0307?
To fix CVE-2015-0307, update Adobe Flash Player to version 16.0.0.257 or later, or Adobe AIR to version 16.0.0.245 or later.
Which versions of Adobe Flash Player are affected by CVE-2015-0307?
Adobe Flash Player versions before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 are affected by CVE-2015-0307.
Is Adobe AIR impacted by CVE-2015-0307?
Yes, CVE-2015-0307 impacts Adobe AIR versions prior to 16.0.0.245 on Windows and OS X and prior to 16.0.0.272 on Android.
What platforms are vulnerable to CVE-2015-0307?
CVE-2015-0307 affects Windows, macOS, and Linux platforms running the vulnerable versions of Adobe Flash Player and Adobe AIR.