PT-2015-2830 · Adobe+3 · Flash Player+4

CVE-2015-8416 · Publicado 2015-12-09 · Atualizado 2023-05-08

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Integrated Runtime and Flash Player (affected versions not specified)

Description The issue is caused by a buffer overflow. It may allow a remote attacker to execute arbitrary code or cause a denial of service. The vulnerability is also related to a Use-After-Free condition in the TextBlock releaseLineCreationData, which can be exploited for remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2015-2079

BDU:2015-12196

CVE-2015-8416

MGASA-2015-0468

OPENSUSE-SU-2015_2239-1

RHSA-2015:2593

RHSA-2015_2593

SUSE-SU-2015:2236-1

SUSE-SU-2015:2247-1

ZDI-15-666

Produtos afetados

Alt Linux

Integrated Runtime

Flash Player

Red Hat

Suse

Referências · 446

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8060 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2015-8433 · Nota
• https://access.redhat.com/security/cve/CVE-2015-8059 · Nota
• https://suse.com/security/cve/CVE-2015-8434.html · Nota
• https://helpx.adobe.com/security/products/flash-player/apsb15-32.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-00710 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-8428 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8403 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-8060 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8416 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8425 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-8419 · Nota
• https://bdu.fstec.ru/vul/2015-12198 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2015-8067 · Nota
• https://access.redhat.com/security/cve/CVE-2015-8654 · Nota