CVE-2015-5123

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-04-13

Reference

https://nvd.nist.gov/vuln/detail/CVE-2015-5123

⌖ exploited in the wild shame 50/100 exploited-in-wild

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).

Players implicated

Adobe · vendor Flash Player · product

Description

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).

Affected FedRAMP products 8 in the catalog

Product	Provider	Status	Match
Adobe Acrobat Sign for Government	Adobe	Authorized	vendor-exact · 0.90
Adobe Analytics	Adobe	Authorized	vendor-exact · 0.90
Adobe Campaign	Adobe	Authorized	vendor-exact · 0.90
Adobe Connect Managed Services (ACMS-GC)	Adobe	Authorized	vendor-exact · 0.90
Adobe Creative Cloud for Enterprise	Adobe	Authorized	vendor-exact · 0.90
Adobe Document Cloud (PDF Services & Adobe Sign)	Adobe	Authorized	vendor-exact · 0.90
Adobe Experience Manager Managed Services (AEMMS-GC)	Adobe	Authorized	vendor-exact · 0.90
Adobe Learning Manager	Adobe	Authorized	vendor-exact · 0.90