CVE-2015-8445

Currently unrated

Key Information:

Vendor
Adobe
Status
Air Sdk
Air Sdk \& Compiler
Vendor
CVE Published:
10 December 2015

Summary

Integer overflow in the Shader filter implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a large BitmapData source object.

References

http://lists.opensuse.org/opensuse-security-announce/2015...
vendor-advisoryx_refsource_SUSE
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/do...
x_refsource_CONFIRM
https://helpx.adobe.com/security/products/flash-player/ap...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.