CVE:CVE-2015-5123
CNNVD:CNNVD-201507-358
Adobe Flash Player是美国奥多比（Adobe）公司的一款跨平台、基于浏览器的多媒体播放器产品。该产品支持跨屏幕和浏览器查看应用程序、内容和视频。ActionScript 3（AS3）是Adobe为其Flash产品开发的一种面向对象的编程语言。
Adobe Flash Player的AS3实现过程中的BitmapData类存在释放后重用漏洞。远程攻击者可借助特制的Flash内容利用该漏洞执行任意代码，或造成拒绝服务（内存损坏）。以下版本受到影响：基于Windows和OS X平台的Adobe Flash Player 18.0.0.203及之前版本和Adobe Flash Player Extended Support Release 13.0.0.302及之前版本，基于Linux（安装Google Chrome）平台的Adobe Flash Player 18.0.0.204及之前版本，基于Linux平台的Adobe Flash Player Extended Support Release 11.2.202.481及之前版本。（在2015年7月被广泛利用）
solution:Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_server to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.6,and avoid the version 6.6; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade opensuse evergreen to a higher version than 11.4,and avoid the version 11.4; Upgrade suse linux_enterprise_desktop to a higher version than 11:sp3,11:sp4,12,and avoid the version 11:sp3,11:sp4,12; Upgrade suse linux_enterprise_workstation_extension to a higher version than 12,and avoid the version 12; Upgrade adobe flash_player to a higher version than 11.2.202.481,13.0.0.302,18.0.0.203,and avoid the version [11.0,11.2.202.481],[13.0,13.0.0.302],[18.0,18.0.0.203]; Upgrade adobe flash_player_desktop_runtime to a higher version than 18.0.0.203,and avoid the version [18.0,18.0.0.203]