Use-After-Free Vulnerability in Adobe Flash Player and Adobe AIR
CVE-2015-8448

Currently unrated

Key Information:

Vendor

Adobe
Status
Air Sdk
Air Sdk \& Compiler
Vendor
CVE Published:
10 December 2015

What is CVE-2015-8448?

A use-after-free vulnerability exists in the DisplacementMapFilter object of Adobe Flash Player and Adobe AIR, which could allow attackers to execute arbitrary code on the affected systems. By manipulating the mapBitmap property, unauthorized users may exploit this flaw to gain control over the affected software, compromising system integrity. This vulnerability affects multiple versions on various platforms including Windows, OS X, and Linux.

References

http://lists.opensuse.org/opensuse-security-announce/2015...
vendor-advisoryx_refsource_SUSE
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/do...
x_refsource_CONFIRM
https://helpx.adobe.com/security/products/flash-player/ap...
x_refsource_CONFIRM

EPSS Score

7% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.