CVE-2015-0315: Use After Free
First published: Fri Feb 06 2015(Updated: )
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0320, and CVE-2015-0322.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | <=13.0.0.264 | |
| Adobe Acrobat Reader | =14.0.0.125 | |
| Adobe Acrobat Reader | =14.0.0.145 | |
| Adobe Acrobat Reader | =14.0.0.176 | |
| Adobe Acrobat Reader | =14.0.0.179 | |
| Adobe Acrobat Reader | =15.0.0.152 | |
| Adobe Acrobat Reader | =15.0.0.167 | |
| Adobe Acrobat Reader | =15.0.0.189 | |
| Adobe Acrobat Reader | =15.0.0.223 | |
| Adobe Acrobat Reader | =15.0.0.239 | |
| Adobe Acrobat Reader | =15.0.0.246 | |
| Adobe Acrobat Reader | =16.0.0.235 | |
| Adobe Acrobat Reader | =16.0.0.257 | |
| Adobe Acrobat Reader | =16.0.0.287 | |
| Adobe Acrobat Reader | =16.0.0.296 | |
| Apple iOS and macOS | ||
| Microsoft Windows | ||
| Adobe Acrobat Reader | <=11.2.202.440 | |
| Linux Kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00009.html
- http://rhn.redhat.com/errata/RHSA-2015-0140.html
- http://secunia.com/advisories/62777
- http://secunia.com/advisories/62886
- http://secunia.com/advisories/62895
- http://security.gentoo.org/glsa/glsa-201502-02.xml
- http://www.securityfocus.com/bid/72514
- http://www.securitytracker.com/id/1031706
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100697
- https://helpx.adobe.com/security/products/flash-player/apsb15-04.html
- https://technet.microsoft.com/library/security/2755801
Frequently Asked Questions
What is the severity of CVE-2015-0315?
CVE-2015-0315 is rated as a critical vulnerability due to its potential to allow attackers to execute arbitrary code.
How do I fix CVE-2015-0315?
To fix CVE-2015-0315, users should update Adobe Flash Player to the latest version available.
Which versions are affected by CVE-2015-0315?
CVE-2015-0315 affects Adobe Flash Player versions prior to 13.0.0.269, 14.x through 16.x before 16.0.0.305 on Windows and OS X, and versions before 11.2.202.442 on Linux.
What types of systems are impacted by CVE-2015-0315?
CVE-2015-0315 impacts systems running affected versions of Adobe Flash Player on Windows, OS X, and Linux.
Can CVE-2015-0315 lead to remote code execution?
Yes, CVE-2015-0315 can lead to remote code execution due to the use-after-free vulnerability.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/remedy
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/13.0.0.264
- version/adobe acrobat reader/14.0.0.125
- version/adobe acrobat reader/14.0.0.145
- version/adobe acrobat reader/14.0.0.176
- version/adobe acrobat reader/14.0.0.179
- version/adobe acrobat reader/15.0.0.152
- version/adobe acrobat reader/15.0.0.167
- version/adobe acrobat reader/15.0.0.189
- version/adobe acrobat reader/15.0.0.223
- version/adobe acrobat reader/15.0.0.239
- version/adobe acrobat reader/15.0.0.246
- version/adobe acrobat reader/16.0.0.235
- version/adobe acrobat reader/16.0.0.257
- version/adobe acrobat reader/16.0.0.287
- version/adobe acrobat reader/16.0.0.296
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows
- version/adobe acrobat reader/11.2.202.440
- vendor/linux
- canonical/linux kernel