CVE-2015-5123

Vulnerability details

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).

Added to CISA KEV: 2022-04-13

Ransomware campaign use: Unknown

CISA due date: 2022-05-04

Defensive guidance from CISA

The impacted product is end-of-life and should be disconnected if still in use.

This is the source's required-action field, not an independently validated patch procedure. Refer to the vendor for exact affected versions and fixes.