CVE-2015-0308: Use After Free
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0308?
CVE-2015-0308 has a CVSS base score of 7.5, indicating it is a high severity vulnerability.
How do I fix CVE-2015-0308?
To fix CVE-2015-0308, users should update Adobe Flash Player and Adobe AIR to the latest versions provided by Adobe.
What software is affected by CVE-2015-0308?
CVE-2015-0308 affects Adobe Flash Player versions before 13.0.0.260 and Adobe AIR versions before 16.0.0.245 on specified operating systems.
What types of attacks can CVE-2015-0308 facilitate?
CVE-2015-0308 can facilitate remote code execution attacks, allowing attackers to execute arbitrary code on the target system.
What are the platforms affected by CVE-2015-0308?
CVE-2015-0308 affects multiple platforms, including Windows, macOS, Linux, and Android devices running specific versions of Adobe software.