Archived Content

In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
Alert

Updates Available for Flash AS3 opaqueBackground and BitmapData Use-After-Free Vulnerabilities

Last Revised

Adobe has released security updates to address critical vulnerabilities within the ActionScript 3 opaqueBackground and BitmapData classes of Flash Player. Exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code on a vulnerable system. Versions affected include Adobe Flash Player 9 through 18.0.0.204.

Users and administrators are encouraged to review Adobe Security Bulletin APSB15-18 and apply the necessary updates. Additional information can be found in Vulnerability Notes VU#338736 and VU#918568.

This product is provided subject to this Notification and this Privacy & Use policy.