Main Vulnerability Database Vulnerabilities #VU5462

Null pointer dereference in Adobe products - CVE-2015-0328

Published: January 27, 2017 / Updated: March 10, 2017

Vulnerability identifier: #VU5462

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-0328

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to cause DoS conditions on the target system.

The weakness exists due to NULL pointer dereference when processing .swf content. A remote attacker can create a specially crafted Web site, trick the victim into visiting it and cause the application to crash.

Affected software

Adobe Flash Player for Linux
Adobe Flash Player Extended Support Release
Adobe Flash Player

How to mitigate CVE-2015-0328

Install update from vendor's website.

External References

https://helpx.adobe.com/security/products/flash-player/apsb15-04.html

Related Security Bulletins