Workarounds for Adobe Flash AS3 opaqueBackground and BitmapData Use-After-Free Vulnerabilities

Dino Lopardo

July 13, 2015 15:37

Workarounds for Adobe Flash AS3 opaqueBackground and BitmapData Use-After-Free Vulnerabilities

07/11/2015 04:55 PM EDT

Original release date: July 11, 2015 | Last revised: July 13, 2015

Adobe Flash Player contains critical vulnerabilities within the ActionScript 3 opaqueBackground and BitmapData classes, which could allow a remote attacker to execute arbitrary code on a vulnerable system. Versions affected include Adobe Flash Player 9 through 18.0.0.204.

Users and administrators are encouraged to review Adobe Security Advisory APSA15-04, as well as Vulnerability Notes VU#338736 and VU#918568 for workaround information. No patch is currently available.