PT-2015-1751 · Adobe+3 · Flash Player+6

Publicado

2015-08-11

·

Atualizado

2018-01-05

·

CVE-2015-5560

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 18.0.0.232 on Windows and OS X Adobe Flash Player versions prior to 11.2.202.508 on Linux Adobe AIR versions prior to 18.0.0.199 Adobe AIR SDK versions prior to 18.0.0.199 Adobe AIR SDK & Compiler versions prior to 18.0.0.199
Description The issue is related to an integer overflow in Adobe Flash Player and Adobe AIR, which allows attackers to execute arbitrary code via unspecified vectors. This can be exploited by a remote attacker to execute arbitrary code.
Recommendations For Adobe Flash Player versions prior to 18.0.0.232 on Windows and OS X, update to version 18.0.0.232 or later. For Adobe Flash Player versions prior to 11.2.202.508 on Linux, update to version 11.2.202.508 or later. For Adobe AIR versions prior to 18.0.0.199, update to version 18.0.0.199 or later. For Adobe AIR SDK versions prior to 18.0.0.199, update to version 18.0.0.199 or later. For Adobe AIR SDK & Compiler versions prior to 18.0.0.199, update to version 18.0.0.199 or later.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

ALT-PU-2015-1674
BDU:2015-11097
CVE-2015-5560
MGASA-2015-0311
OPENSUSE-SU-2015_1388-1
OPENSUSE-SU-2015_1391-1
RHSA-2015:1603
RHSA-2015_1603
SUSE-SU-2015:1373-1
SUSE-SU-2015:1374-1

Produtos afetados

Alt Linux
Air
Air Sdk
Air Sdk & Compiler
Flash Player
Red Hat
Suse