{"uuid": "e9dd4651-9918-45a1-9e4f-ff1372d48241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0359", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_domain_memory_uaf.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"bilou\", \"Unknown\", \"hdarwin\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a use-after-free vulnerability in Adobe Flash Player. The\\n          vulnerability occurs when the ByteArray assigned to the current ApplicationDomain\\n          is freed from an ActionScript worker, when forcing a reallocation by copying more\\n          contents than the original capacity, but Flash forgets to update the domainMemory\\n          pointer, leading to a use-after-free situation when the main worker references the\\n          domainMemory again. This module has been tested successfully on Windows 7 SP1\\n          (32-bit), IE 8 and IE11 with Flash 17.0.0.134.\", \"disclosure_date\": \"2014-04-14\", \"fullname\": \"exploit/windows/browser/adobe_flash_domain_memory_uaf\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Adobe Flash Player domainMemory ByteArray Use After Free\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/adobe_flash_domain_memory_uaf.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/browser/adobe_flash_domain_memory_uaf\", \"references\": [\"CVE-2015-0359\", \"URL-https://helpx.adobe.com/security/products/flash-player/apsb15-06.html\", \"URL-https://www.fireeye.com/blog/threat-research/2015/04/angler_ek_exploiting.html\", \"URL-http://malware.dontneedcoffee.com/2015/04/cve-2015-0359-flash-up-to-1700134-and.html\", \"URL-https://git.hacklab.kr/snippets/13\", \"URL-http://pastebin.com/Wj3NViUu\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:57.271435Z"}