Arbitrary Code Execution and Memory Corruption in Adobe Flash Player and AIR
CVE-2015-8045

Currently unrated

Key Information:

Vendor
Adobe
Status
Air
Vendor
CVE Published:
10 December 2015

Summary

This vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute arbitrary code or trigger a denial of service due to memory corruption across various platforms. Specifically, it affects various versions of Adobe Flash Player and Adobe AIR, opening routes for potential exploitation through unspecified vectors. Successful exploitation could compromise the affected systems, making it crucial for users to upgrade to patched versions to mitigate the risk.

References

http://lists.opensuse.org/opensuse-security-announce/2015...
vendor-advisoryx_refsource_SUSE
https://helpx.adobe.com/security/products/flash-player/ap...
x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2015...
vendor-advisoryx_refsource_SUSE

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.