--- title: Zero Day Security Threats - a Big Issue for Adobe Flash Player so far in 2015 description: Whilst the New Year is supposed to symbolise a fresh start and better things to come, not all businesses have been so lucky. We’re only just over a month into 2015 and Adobe has already experienced nu image: https://blog.grantmcgregor.co.uk/hubfs/Adobe.jpg --- [![Grant McGregor](https://blog.grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg "Grant McGregor")](https://www.grantmcgregor.co.uk/) - [Home](https://grantmcgregor.co.uk/) - About Us - [Our Story](https://grantmcgregor.co.uk/about-us/our-story) - [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team) - [Certifications](https://grantmcgregor.co.uk/about-us/certifications) - [Careers](https://grantmcgregor.co.uk/about-us/careers) - IT Support Services - [IT Support Services](https://grantmcgregor.co.uk/it-support-services) - [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support) - [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service) - Professional IT Services - [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services) - [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium) - [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot) - [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services) - [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure) - [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence) - [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone) - [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4) - [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc) - [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks) - [Cyber Security](https://grantmcgregor.co.uk/cyber-security) - Knowledge Hub - [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies) - [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories) - [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog) - [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast) - [Client Area](https://grantmcgregor.co.uk/client-area) - [Contact us](https://grantmcgregor.co.uk/contact-us) - [Home](https://grantmcgregor.co.uk/) - About Us - [Our Story](https://grantmcgregor.co.uk/about-us/our-story) - [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team) - [Certifications](https://grantmcgregor.co.uk/about-us/certifications) - [Careers](https://grantmcgregor.co.uk/about-us/careers) - IT Support Services - [IT Support Services](https://grantmcgregor.co.uk/it-support-services) - [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support) - [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service) - Professional IT Services - [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services) - [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium) - [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot) - [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services) - [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure) - [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence) - [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone) - [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4) - [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc) - [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks) - [Cyber Security](https://grantmcgregor.co.uk/cyber-security) - Knowledge Hub - [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies) - [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories) - [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog) - [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast) - [Client Area](https://grantmcgregor.co.uk/client-area) - [Contact us](https://grantmcgregor.co.uk/contact-us) [Contact Us](https://grantmcgregor.co.uk/contact-us) [Back to main](https://grantmcgregor.co.uk/knowledge-hub/blog) # Zero Day Security Threats - a Big Issue for Adobe Flash Player so far in 2015 Grant McGregor Team 10 February 2015 • 4 min read ![](https://blog.grantmcgregor.co.uk/hubfs/Adobe.jpg)   Whilst the New Year is supposed to symbolise a fresh start and better things to come, not all businesses have been so lucky. We’re only just over a month into 2015 and Adobe has already experienced numerous zero day exploits, which are causing significant problems for computer users. Despite implementing a disciplined security regime after the trend of zero day Flash exploits in 2009, the company’s Flash Player has been hit by multiple zero day threats, with the latest being publicly disclosed by the company in a bulletin released on 2nd February 2015. The latest vulnerability is identified as CVE-2015-0313 and is currently present in Adobe Flash Player 16.0.0.296 and older versions. In its advisory bulletin to users, Adobe has warned that successful exploitation could result in users’ systems crashing and potentially allow an attacker to take control of an affected system. They have also said that the majority of exploitations are taking place via drive-by-download attacks on systems running Internet Explorer and Firefox on Windows 8.1 and below. So far it has been reported that the drive-by-downloads are being served through ads on the likes of dailymotion.com, theblaze.com, nydailynews.com, tagged.com and webmail.earthlink.net. Although the vulnerability was only disclosed by Adobe this week, it’s thought that the exploits have been active since 3rd December 2014. Back in 2014, it was Microsoft’s Internet Explorer browser that was exploit writers’ main target. However, after releasing a number of security updates, Microsoft were able to successfully put a stop to the technique that exploit writers had been using. After that there was a quiet, exploit-free period but it turns out that exploit writers were simply looking for their next target and that unsurprisingly was Adobe Flash Player. Seeing as Flash has a similar attack surface to IE and exploit writers were already using the software to carry out IE exploits, all they had to do was start looking for bugs in Flash and continue using the same techniques they were using last year.   ### Why is Flash so vulnerable to attacks? Although tech experts don’t see these issues as being a fundamental insecurity in Flash, it’s fair to say that the technology doesn’t exactly have a great track record for being secure. Cyber criminals tend to pick applications that are widely used and known for poor security history, making the Adobe Flash Player a prime candidate. One of the reasons why Flash is so vulnerable to attacks is because of its age. Every time the software is updated, numerous security holes are added, which end up being patched along the way. Unfortunately though, it is these security holes that criminals are able to target and exploit. It’s advised if you feel at all vulnerable to call us here at [Grant McGregor](https://www.grantmcgregor.co.uk/) to discuss a strategy to protect yourself from these Adobe zero day threats.   ### What can Adobe Flash Player users do? Although the attacks target Windows users running Flash in Internet Explorer and Firefox, the underlying CVE-2015-0313 is also said to be present in Flash for Macs and Linux too. Adobe has already begun distributing a fix to Flash Player users that have opted in to receive automatic updates but for those who haven’t, it is recommended that you currently disable Flash or at least use it in Google Chrome (as it has the best anti-exploit protections). Enabling the click-to-play feature in your browser will prevent plugin-based content like Flash from automatically running without your consent and keeping your anti virus software up to date will also help, as Adobe shares exploit samples with most security vendors so they are able to detect signatures.   For more information about how to keep your IT system secure, feel free to [get in touch](https://www.grantmcgregor.co.uk/contact-us/)with Grant McGregor.     Image source: [https://farm8.staticflickr.com/7529/15921569186\_0392f01293.jpg](https://farm8.staticflickr.com/7529/15921569186_0392f01293.jpg) Image credit: [perspec\_photo88](https://www.flickr.com/photos/111692634@N04/15921569186/sizes/m/) Grant McGregor Team 10 February 2015 • 4 min read ## Recent Posts ![](https://blog.grantmcgregor.co.uk/hubfs/Shadow%20AI%20-%20Is%20Your%20Business%20Ready%20for%20AI%20Adoption.png) ### Shadow AI: Is Your Business Ready for AI Adoption? Understand shadow AI's impact on your business. Discover how to assess risks, improve processes, and adopt AI securely w... [Read More](https://blog.grantmcgregor.co.uk/shadow-ai-is-your-business-ready-for-ai-adoption) ![Our Net Zero Target for 2040 - What Can We Change](https://blog.grantmcgregor.co.uk/hubfs/Our%20Net%20Zero%20Target%20for%202040%20-%20What%20Can%20We%20Change.png) ### Our Net Zero Target for 2040: What Can We Change? From company vehicles and travel to suppliers and technology, see how Grant McGregor is working towards its net zero tar... [Read More](https://blog.grantmcgregor.co.uk/our-net-zero-target-for-2040-what-can-we-change) ![](https://blog.grantmcgregor.co.uk/hubfs/What%20Is%20Penetration%20Testing%3F%20A%20Guide%20for%20Businesses.png) ### What Is Penetration Testing? A Guide for Businesses Learn what penetration testing is, how it works, what the report should include and when your business should consider a... [Read More](https://blog.grantmcgregor.co.uk/what-is-penetration-testing-a-guide-for-businesses) ![Grant McGregor named 2026 Top Managed Service Provider](https://blog.grantmcgregor.co.uk/hubfs/Social/MSP%20501%202026%20Winner.png) ### Grant McGregor Recognised as a Leading Global MSP in the 2026 MSP 501 Grant McGregor has been named a Top Global Managed Service Provider in the 2026 MSP 501, ranking #1 Scotland-based MSP a... [Read More](https://blog.grantmcgregor.co.uk/grant-mcgregor-recognised-as-a-leading-global-msp-in-the-2026-msp-501) Union ## Empower your business with secure, expert-led solutions. Talk to us about people-focused technology that drives results. [Start a conversation](https://grantmcgregor.co.uk/contact-us) ![](https://blog.grantmcgregor.co.uk/hubfs/Woman%20in%20White%20longsleeve%20polo.png) ![Divider Footer](https://blog.grantmcgregor.co.uk/hubfs/footer.svg) ![GrantMcGeregor Logo White](https://blog.grantmcgregor.co.uk/hubfs/McGregor%20Theme%20Assets/GRMC_white_logo-cropped.svg "GrantMcGeregor Logo White") Premium IT Services Tailored for Leading Brands [Follow us on LinkedIn](https://www.linkedin.com/company/grant-mcgregor-ltd/) [Follow us on Facebook](https://www.youtube.com/itgrantmcgregor) [Follow us on Facebook](https://www.facebook.com/grantmcgregorltd/) [Follow us on Twitter](https://x.com/GrantMcGregorIT) Quick Links - [Home](https://grantmcgregor.co.uk) - [About us](https://grantmcgregor.co.uk/about-us/our-story) - [Knowledge Hub](https://grantmcgregor.co.uk/knowledge-hub/blog) - [Contact us](https://grantmcgregor.co.uk/contact-us) Services - [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support) - [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service) - [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services) - [Cyber Security](https://grantmcgregor.co.uk/cyber-security) Edinburgh – Chesterfield ![Phone icon](https://blog.grantmcgregor.co.uk/hubfs/raw_assets/public/GrandMcGregor_climb/images/tel.png "Phone icon") [0131 603 7910](tel:+441316037910) ![Email icon](https://blog.grantmcgregor.co.uk/hubfs/raw_assets/public/GrandMcGregor_climb/images/mail.png "Email icon") [info@grantmcgregor.co.uk](mailto:info@grantmcgregor.co.uk) ![Location icon](https://blog.grantmcgregor.co.uk/hubfs/raw_assets/public/GrandMcGregor_climb/images/loc.png "Location icon") **Main Office:** The Merchants' Hall, 22 Hanover St, Edinburgh EH2 2EP © 2026 Grant McGregor. All rights reserved. [Privacy and Cookie Policy](https://blog.grantmcgregor.co.uk/hubfs/UsefulDownloads/Policies/GRMC-SEC-Privacy-and-Cookie-Policy.pdf) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Grant McGregor Team", "url" : "https://blog.grantmcgregor.co.uk/author/grmc-team" }, "dateModified" : "2020-05-15T10:05:13.963Z", "datePublished" : "2015-02-10T11:39:20.000Z", "headline" : "Zero Day Security Threats - a Big Issue for Adobe Flash Player so far in 2015", "image" : [ "https://blog.grantmcgregor.co.uk/hubfs/Adobe.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.grantmcgregor.co.uk/2015/zero-day-security-threats-a-big-issue-for-adobe-flash-player-so-far-in-2015", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg" }, "name" : "Grant McGregor" } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://grantmcgregor.co.uk/", "@type" : "LocalBusiness", "address" : { "@type" : "PostalAddress", "addressCountry" : "GB", "addressLocality" : "Edinburgh", "postalCode" : "EH2 2EP", "streetAddress" : "22 Hanover Street" }, "geo" : { "@type" : "GeoCoordinates", "latitude" : 55.9526313, "longitude" : -3.1970679 }, "image" : "https://grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg", "name" : "Grant McGregor", "openingHoursSpecification" : { "@type" : "OpeningHoursSpecification", "closes" : "18:00", "dayOfWeek" : [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ], "opens" : "08:00" }, "sameAs" : [ "https://www.facebook.com/grantmcgregorltd/", "https://x.com/GrantMcGregorIT", "https://www.youtube.com/itgrantmcgregor", "https://www.linkedin.com/company/grant-mcgregor-ltd/" ], "telephone" : "+441316037910", "url" : "https://grantmcgregor.co.uk/" } ```