PT-2015-2920 · Adobe+3 · Integrated Runtime+4

Furugawa Nagisa

·

Publicado

2015-12-08

·

Atualizado

2023-05-08

·

CVE-2015-8436

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash (affected versions not specified)
Description The issue is related to the implementation of the PrintJob object in Adobe Flash Player and Adobe Integrated Runtime, specifically a use-after-free memory error. This can be exploited by a remote attacker using a specially crafted addPage argument, potentially allowing the execution of arbitrary code.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2015-2079
BDU:2016-00017
CVE-2015-8436
MGASA-2015-0468
OPENSUSE-SU-2015_2239-1
RHSA-2015:2593
RHSA-2015_2593
SUSE-SU-2015:2236-1
SUSE-SU-2015:2247-1
ZDI-15-603

Produtos afetados

Alt Linux
Flash Player
Integrated Runtime
Red Hat
Suse