CVE-2015-5556: Use After Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5556?
CVE-2015-5556 is considered to have a critical severity level due to its potential for enabling arbitrary code execution.
What software is affected by CVE-2015-5556?
CVE-2015-5556 affects Adobe Flash Player versions before 18.0.0.232 on Windows and OS X, and Adobe AIR versions before 18.0.0.199.
How do I fix CVE-2015-5556?
To fix CVE-2015-5556, update Adobe Flash Player and Adobe AIR to the latest versions as recommended by Adobe.
Are there any known exploits for CVE-2015-5556?
Yes, CVE-2015-5556 has been exploited in the wild to deliver malware via compromised websites.
Is there a workaround for CVE-2015-5556?
While there is no official workaround for CVE-2015-5556, users are advised to disable Adobe Flash Player until the vulnerability is fixed.