Sid 1-49654

Message

FILE-FLASH Adobe Flash Player PCRE control character denial of service attempt

Summary

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.

Impact

Detection of a Denial of Service Attack

CVE-2015-0318:

CVSS base score 10.0

CVSS impact score 10.0

CVSS exploitability score 10.0

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Detailed information

CVE-2015-0318: Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330.

Affected systems

• adobe flash_player 11.2.202.440
• adobe flash_player 13.0.0.264
• adobe flash_player 14.0.0.125
• adobe flash_player 14.0.0.145
• adobe flash_player 14.0.0.176
• adobe flash_player 14.0.0.179
• adobe flash_player 15.0.0.152
• adobe flash_player 15.0.0.167
• adobe flash_player 15.0.0.189
• adobe flash_player 15.0.0.223
• adobe flash_player 15.0.0.239
• adobe flash_player 15.0.0.246
• adobe flash_player 16.0.0.235
• adobe flash_player 16.0.0.257
• adobe flash_player 16.0.0.287
• adobe flash_player 16.0.0.296

Ease of attack

CVE-2015-0318:

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

False positives

False negatives

Corrective action

Contributors

• Cisco's Talos Intelligence Group

Additional References

• helpx.adobe.com/security/products/flash-player/apsb15-04.html