Gravedad: Crítico
  Identificadores de CVE : 2015-0308,apsb15-01
  Fecha recomendada: 21 de julio de 2015

  Descripción

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and before 16.0.0.272, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors.

  Revelación de la información

Apply associated Trend Micro DPI Rules.

  Soluciones

  Trend Micro Deep Security DPI Rule Number: 1006458
  Trend Micro Deep Security DPI Rule Name: 1006458 - Adobe Flash Player Use After Free Remote Code Execution Vulnerability (CVE-2015-0308)

  Software y versión afectados

  • adobe adobe_air 15.0.0.356
  • adobe adobe_air_sdk 15.0.0.356
  • adobe adobe_air_sdk_and_compiler 15.0.0.356
  • adobe flash_player 11.2.202.425
  • adobe flash_player 13.0.0.259
  • adobe flash_player 14.0.0.125
  • adobe flash_player 14.0.0.145
  • adobe flash_player 14.0.0.176
  • adobe flash_player 14.0.0.179
  • adobe flash_player 15.0.0.144
  • adobe flash_player 15.0.0.152
  • adobe flash_player 15.0.0.167
  • adobe flash_player 15.0.0.189
  • adobe flash_player 15.0.0.223
  • adobe flash_player 15.0.0.238
  • adobe flash_player 15.0.0.239
  • adobe flash_player 15.0.0.246
  • adobe flash_player 16.0.0.234
  • adobe flash_player 16.0.0.235