CVE-2015-0321

Vulnerability

CVE-2015-0321 is a memory corruption vulnerability in Adobe Flash Player affecting versions prior to 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X, and prior to 11.2.202.442 on Linux. The vulnerability is triggered via unspecified vectors, and it is distinct from other Flash Player CVEs such as CVE-2015-0314, CVE-2015-0316, CVE-2015-0318, CVE-2015-0329, and CVE-2015-0330 [3].

Exploitation

An attacker can exploit this vulnerability by convincing a user to open a specially crafted SWF file or visit a malicious web page that loads the file. No authentication is required, and the attack can be launched remotely. The exact exploitation steps are not publicly detailed, but the vulnerability is reachable through standard Flash Player content delivery mechanisms [3].

Impact

Successful exploitation allows an attacker to execute arbitrary code with the privileges of the user running Flash Player, or to cause a denial of service (memory corruption). This could lead to full compromise of the affected system, including data theft, installation of malware, or disruption of service [3].

Mitigation

Adobe released fixed versions: 13.0.0.269, 16.0.0.305 for Windows and OS X, and 11.2.202.442 for Linux. Microsoft provided updates for Flash Player in Internet Explorer and Microsoft Edge via advisory 2755801 [1]. Red Hat issued RHSA-2015:0140 for Red Hat Enterprise Linux [2], and Gentoo published GLSA 201502-02 recommending upgrade to the patched version [3]. No workaround is available; users must apply the update.