Description
Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | flashplugin-nonfree | 11.2.202.429ubuntu0.14.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | flash-plugin | 11.2.202.429-1.el6 | RHSA-2015:0052 |
| RHEL 5 | flash-plugin | 11.2.202.429-1.el5 | RHSA-2015:0052 |
Advisories 1
- RHSA-2015:0052 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 62371 third-party-advisory
- GLSA-201502-02 vendor-advisory
- 62740 third-party-advisory
- 62177 third-party-advisory
- adobe-cve20150301-unspecified(99981) vdb-entry
- http://helpx.adobe.com/security/products/flash-player/apsb15-01.html
- 62252 third-party-advisory
- 1031525 vdb-entry
- 62187 third-party-advisory
- 72034 vdb-entry