Adobe Flash Player Vulnerability (CVE-2015-5123)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: CRITICAL

  CVE Identifier: CVE-2015-5123

  Advisory Date: JUL 12, 2015

---

  DESCRIPTION

This is the third zero-day vulnerability disclosed from the Hacking Team leak. It affects all versions of Flash Player for Windows, Mac, and Linux. Once successfully exploited, it could cause a crash and may possibly lead an attacker from taking control of the affected system thus compromising its security. Trend Micro detects this as SWF_EKSPLOYT.EDF.

  TREND MICRO PROTECTION INFORMATION

Vulnerability protection in Trend Micro Deep Security protects user systems from threats that may leverage this vulnerability with the following DPI rule:

• 1006859 - Adobe Flash Player BitmapData Remote Code Execution Vulnerability

  SOLUTION

  PATCH: https://helpx.adobe.com/security/products/flash-player/apsa15-04.html

Related Blog Entries

• OS X Zero-days on the Rise—A 2015 Midyear Review and Outlook on Advanced Attack Surfaces
• New Zero-Day Vulnerability (CVE-2015-5123) in Adobe Flash Emerges from Hacking Team Leak
• Hacking Team Flash Zero-Day Integrated Into Exploit Kits
• Unpatched Flash Player Flaw, More POCs Found in Hacking Team Leak
• Hacking Team Flash Zero-Day Tied To Attacks In Korea and Japan… on July 1
• A Look at the Open Type Font Manager Vulnerability from the Hacking Team Leak
• The Adobe Flash Conundrum: Old Habits Die Hard