Adobe Flash Player Memory Corruption Vulnerability (CVE-2015-0359)

Publish date: June 09, 2016

Severity: CRITICAL

Advisory Date: MAY 07, 2015

DESCRIPTION

Adobe Flash Player is prone to an unspecified memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

SOLUTION

PATCH: https://helpx.adobe.com/security/products/flash-player/apsb15-06.html

Trend Micro Deep Security DPI Rule Number: 1006646

AFFECTED SOFTWARE AND VERSION

Adobe Flash Player 17.0.0.134 and earlier versions
Adobe Flash Player 13.0.0.277 and earlier 13.x versions
Adobe Flash Player 11.2.202.451 and earlier 11.x versions
AIR Desktop Runtime 17.0.0.144 and earlier versions
AIR SDK and SDK & Compiler 17.0.0.144 and earlier versions

Related Blog Entries

Ad Network Compromised, Users Victimized by Nuclear Exploit Kit

Related Malware

BKDR_GLUPTEBA.YVA

Featured Stories

$The Mirage of AI Programming: Hallucinations and Code Integrity$
The Mirage of AI Programming: Hallucinations and Code Integrity
The adoption of large language models (LLMs) and Generative Pre-trained Transformers (GPTs), such as ChatGPT, by leading firms like Microsoft, Nuance, Mix and Google CCAI Insights, drives the industry towards a series of transformative changes. As the use of these new technologies becomes prevalent, it is important to understand their key behavior, advantages, and the risks they present.
Read more
$Open Ran Attack of xApps$
Open RAN: Attack of the xApps
This article discusses two O-RAN vulnerabilities that attackers can exploit. One vulnerability stems from insufficient access control, and the other arises from faulty message handling
Read more
$A Closer Exploration of Residential Proxies and CAPTCHA-Breaking Services$
A Closer Exploration of Residential Proxies and CAPTCHA-Breaking Services
This article, the final part of a two-part series, focuses on the details of our technical findings and analyses of select residential proxies and CAPTCHA-solving services.
Read more
$How Residential Proxies and CAPTCHA-Solving Services Become Agents of Abuse$
How Residential Proxies and CAPTCHA-Solving Services Become Agents of Abuse
This article, the first of a two-part series, provides insights on how abusers and cybercriminals use residential proxies and CAPTCHA-solving services to enable bots, scrapers, and stuffers, and proposes security countermeasures for organizations.
Read more