PT-2015-1726 · Adobe+3 · Flash Player+6

Publicado

2015-08-11

·

Atualizado

2018-01-05

·

CVE-2015-5129

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 18.0.0.232 on Windows and OS X Adobe Flash Player versions prior to 11.2.202.508 on Linux Adobe AIR versions prior to 18.0.0.199 Adobe AIR SDK versions prior to 18.0.0.199 Adobe AIR SDK & Compiler versions prior to 18.0.0.199
Description The issue is caused by a heap-based buffer overflow in the affected software, allowing attackers to execute arbitrary code via unspecified vectors. This can be exploited by a remote attacker to gain control over the system.
Recommendations For Adobe Flash Player versions prior to 18.0.0.232 on Windows and OS X, update to version 18.0.0.232 or later. For Adobe Flash Player versions prior to 11.2.202.508 on Linux, update to version 11.2.202.508 or later. For Adobe AIR versions prior to 18.0.0.199, update to version 18.0.0.199 or later. For Adobe AIR SDK versions prior to 18.0.0.199, update to version 18.0.0.199 or later. For Adobe AIR SDK & Compiler versions prior to 18.0.0.199, update to version 18.0.0.199 or later.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2015-1674
BDU:2015-11072
CVE-2015-5129
MGASA-2015-0311
OPENSUSE-SU-2015_1388-1
OPENSUSE-SU-2015_1391-1
RHSA-2015:1603
RHSA-2015_1603
SUSE-SU-2015:1373-1
SUSE-SU-2015:1374-1

Produtos afetados

Alt Linux
Air
Air Sdk
Air Sdk & Compiler
Flash Player
Red Hat
Suse