CVE-2015-0359

EPSS 95.2%

Vexday Risk Score

60Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 95.2%KEV nãoPoC públicaNuclei —Metasploit simPatch referenciado

Lifecycle

14 Apr 2014Metasploit module available

14 Apr 2015Published on NVD

08 May 2015Public PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/36956unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00013.html http://rhn.redhat.com/errata/RHSA-2015-0813.html https://helpx.adobe.com/security/products/flash-player/apsb15-06.html https://security.gentoo.org/glsa/201504-07 http://www.securityfocus.com/bid/74067 http://www.securitytracker.com/id/1032105