Unpatched Flash Vulnerability CVE-2015-0311 Blocked by Palo Alto Networks Traps

On January 22 Adobe confirmed the existence of a Zero Day affecting Adobe Flash Player 16.0.0.287 and assigned CVE-2015-0311 to it. This is the classic zero day scenario of exploitation in the wild before any vendor patch was available and in this blog post we will explain how the uniqueness of Palo Alto Networks Traps blocks this vulnerability.

Let’s start with a brief background on CVE-2015-0311 security implications.  Successful exploitation could result in an attacker compromising data sec...