Adobe Flash Vulnerability CVE-2015-5119 Analysis

This report analyzes the CVE-2015-5119 Flash exploit seen in the wild: a multi-layer obfuscated, XOR-packed SWF that decrypts an embedded payload and exploits a valueOf-induced use-after-free to corrupt vector length, obtain vtables, call VirtualProtect and execute final payloads. The analysis includes sample hashes of observed payloads, notes integration into exploit kits, and recommends applying Adobe's patch and enabling auto-updates.