Type Confusion Vulnerability in Adobe Flash Player and AIR Products
CVE-2015-8439

Currently unrated

Key Information:

Vendor
Adobe
Status
Air Sdk
Air Sdk \& Compiler
Vendor
CVE Published:
10 December 2015

Summary

A vulnerability in Adobe Flash Player and Adobe AIR products stemming from an implementation flaw in the SharedObject object allows attackers to exploit a type confusion issue during a getRemote call. This could lead to arbitrary code execution, potentially compromising the security of affected systems.

References

http://lists.opensuse.org/opensuse-security-announce/2015...
vendor-advisoryx_refsource_SUSE
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/do...
x_refsource_CONFIRM
https://helpx.adobe.com/security/products/flash-player/ap...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.