CVE-2015-5540: Use After Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5540?
CVE-2015-5540 is a critical vulnerability that allows attackers to execute arbitrary code due to a use-after-free error in Adobe Flash Player.
How do I fix CVE-2015-5540?
To fix CVE-2015-5540, users should update Adobe Flash Player to version 18.0.0.232 or later, or Adobe AIR to version 18.0.0.199 or later.
What versions of Adobe software are affected by CVE-2015-5540?
CVE-2015-5540 affects Adobe Flash Player versions before 18.0.0.232 on Windows and OS X, and Adobe AIR versions before 18.0.0.199.
Can CVE-2015-5540 be exploited remotely?
Yes, CVE-2015-5540 can potentially be exploited remotely, allowing attackers to execute code through malicious content.
What platforms are vulnerable to CVE-2015-5540?
CVE-2015-5540 affects multiple platforms including Windows, OS X, and Linux where Adobe Flash Player and AIR are installed.