“Adobe is aware of reports that CVE-2015-3113 is being actively exploited in the wild via limited, targeted attacks. Systems running Internet Explorer for Windows 7 and below, as well as Firefox on Windows XP are known targets,” notes Adobe’s security bulletin.
At the time of writing, Intego security researchers have found no samples of this threat on Mac OS X platforms.
Affected software versions include: Adobe Flash Player 18.0.0.161 and earlier versions for Windows and Macintosh, Adobe Flash Player Extended Support Release version 13.0.0.292 and earlier 13.x versions for Windows and Mac, and Adobe Flash Player 11.2.202.466 and earlier versions for Linux.
Adobe describes the critical flaw these updates address as follows:
These updates resolve a heap buffer overflow vulnerability that could lead to code execution (CVE-2015-3113).
Mac and Windows users should update to Adobe Flash Player 18.0.0.194 immediately. Users of the Adobe Flash Player Extended Support Release should update to Adobe Flash Player 13.0.0.296. Linux users should update to Adobe Flash Player 11.2.202.468. Google Chrome and Internet Explorer on Windows 8.x will automatically update to Flash Player version 18.0.0.194.
